Incident Response Engineer Jobs in USA with Visa Sponsorship
Incident Response Engineers are strong candidates for H-1B and O-1 visa sponsorship. The role qualifies as a specialty occupation requiring a computer science or cybersecurity degree, and demand from tech, finance, and defense contractors means sponsorship is realistic for qualified candidates. For detailed occupation requirements, see the O*NET profile.
See All Incident Response Engineer JobsOverview
Showing 5 of 80+ Incident Response Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 80+ Incident Response Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Incident Response Engineer roles.
Get Access To All JobsINTRODUCTION
The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it is trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more.
ABOUT THE TEAM
The SRE Incident Response team is responsible for handling critical application/infrastructure alerts, orchestrating the war room process and enabling first class observability and alerting systems. Team members are located in several international locations (“follow the sun” model) to provide 24/7 availability. We are a team of unique individuals, experienced and independent, who get things done. On-call coverage is 7 days a week, starting at noon, with the shift ending at 6:00pm. This position is fully remote, candidates required to be in US Pacific time.
As part of your role, you would improve and establish new monitoring, alerting, and observability of services using a wide range of tools. Additionally, you would handle critical alerts and incidents and work directly with engineering and DevOps to improve and optimize availability.
- Manage and participate in incident war rooms, escalating and coordinating response for critical workflow alerts.
- Perform deep-dive troubleshooting for application, transaction, and general technical issues.
- Research Fireblocks blockchain workflows, identify optimization opportunities, issues, and improve monitoring.
- Help identify root causes for incidents and prevent them from happening again. Solve and orchestrate outages by working with multiple teams.
- Improve and establish alerting for our infrastructure, services, and business logic.
- Work closely with the R&D and Support: offering education and guidance on integration, support, and monitoring across the toolset.
- Communicate and escalate issues to senior management in R&D and support, write RCAs, and define next steps.
- Document actions in runbooks and then into automation using Python, Lambda, shell scripts, ArgoCD, and Ansible.
- Focus on the system's observability, availability, reliability, performance/latency, and monitoring.
WHAT YOU'LL BRING
- At least 3+ years of experience as an SRE incident response engineer.
- You are curious, self-motivated, easy to work with, responsible, and production-aware—fast learner and able to take a project from POC to production, while handling decision-making and communication.
- Experience with Coding languages - Python/JavaScript/Bash (Must).
- At least 3+ years of experience with Alerting & Monitoring systems such as DataDog, Coralogix / Splunk / New Relic / Prometheus.
- Experience working with Linux systems from kernel to shell and beyond.
- Cloud systems such as AWS / Google Cloud / Azure.
- Experience with Docker, Kubernetes, and Helm.
- SCM - Git/bitbucket/gitlab.
- High Analytical & Troubleshooting skills - ability to solve complex problems.
- Strong verbal and written communication skills and a collaborative mindset.
WANT TO STAND OUT FROM THE CROWD?
- Previous experience in cryptocurrencies / blockchains - a big advantage.
- In-depth knowledge in: Linux optimization, nginx, ArgoCD, DataDog, MySQL.
- Previous experience as a C++ or Node developer.
- BSC in Computer Science or related technical certifications.
COMPENSATION
For employees hired to work remotely from New York, or from our NYC HQ, Fireblocks is required by law to include a reasonable estimate of the compensation range for this role. This range is specific to New York City and takes into consideration a wide range of factors that are reviewed when making a hiring decision, such as years of experience, skills, and other business needs. It is not typical for a candidate to be hired at or near the top of the pay range and each compensation decision is dependent on each individual case. A reasonable base salary range estimate for this position is $150,000 - $185,000. The base salary is one component of the total compensation package, which for some roles may include a target bonus, a very competitive equity grant, and very generous benefits. While we believe competitive compensation is a critical aspect of your decision to join us, we do hope you also spend time considering why our mission and culture are right for you. We are creating something transformational here, and we hope you are as excited about the future as we are.
Fireblocks' mission is to enable every business to easily and securely access digital assets and cryptocurrencies. In order to do that, we strongly believe our workforce should be as diverse as our clients, and this is why we embrace diversity and inclusion in all its forms.
Please see our candidate privacy policy here.
INTRODUCTION
The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it is trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more.
ABOUT THE TEAM
The SRE Incident Response team is responsible for handling critical application/infrastructure alerts, orchestrating the war room process and enabling first class observability and alerting systems. Team members are located in several international locations (“follow the sun” model) to provide 24/7 availability. We are a team of unique individuals, experienced and independent, who get things done. On-call coverage is 7 days a week, starting at noon, with the shift ending at 6:00pm. This position is fully remote, candidates required to be in US Pacific time.
As part of your role, you would improve and establish new monitoring, alerting, and observability of services using a wide range of tools. Additionally, you would handle critical alerts and incidents and work directly with engineering and DevOps to improve and optimize availability.
- Manage and participate in incident war rooms, escalating and coordinating response for critical workflow alerts.
- Perform deep-dive troubleshooting for application, transaction, and general technical issues.
- Research Fireblocks blockchain workflows, identify optimization opportunities, issues, and improve monitoring.
- Help identify root causes for incidents and prevent them from happening again. Solve and orchestrate outages by working with multiple teams.
- Improve and establish alerting for our infrastructure, services, and business logic.
- Work closely with the R&D and Support: offering education and guidance on integration, support, and monitoring across the toolset.
- Communicate and escalate issues to senior management in R&D and support, write RCAs, and define next steps.
- Document actions in runbooks and then into automation using Python, Lambda, shell scripts, ArgoCD, and Ansible.
- Focus on the system's observability, availability, reliability, performance/latency, and monitoring.
WHAT YOU'LL BRING
- At least 3+ years of experience as an SRE incident response engineer.
- You are curious, self-motivated, easy to work with, responsible, and production-aware—fast learner and able to take a project from POC to production, while handling decision-making and communication.
- Experience with Coding languages - Python/JavaScript/Bash (Must).
- At least 3+ years of experience with Alerting & Monitoring systems such as DataDog, Coralogix / Splunk / New Relic / Prometheus.
- Experience working with Linux systems from kernel to shell and beyond.
- Cloud systems such as AWS / Google Cloud / Azure.
- Experience with Docker, Kubernetes, and Helm.
- SCM - Git/bitbucket/gitlab.
- High Analytical & Troubleshooting skills - ability to solve complex problems.
- Strong verbal and written communication skills and a collaborative mindset.
WANT TO STAND OUT FROM THE CROWD?
- Previous experience in cryptocurrencies / blockchains - a big advantage.
- In-depth knowledge in: Linux optimization, nginx, ArgoCD, DataDog, MySQL.
- Previous experience as a C++ or Node developer.
- BSC in Computer Science or related technical certifications.
COMPENSATION
For employees hired to work remotely from New York, or from our NYC HQ, Fireblocks is required by law to include a reasonable estimate of the compensation range for this role. This range is specific to New York City and takes into consideration a wide range of factors that are reviewed when making a hiring decision, such as years of experience, skills, and other business needs. It is not typical for a candidate to be hired at or near the top of the pay range and each compensation decision is dependent on each individual case. A reasonable base salary range estimate for this position is $150,000 - $185,000. The base salary is one component of the total compensation package, which for some roles may include a target bonus, a very competitive equity grant, and very generous benefits. While we believe competitive compensation is a critical aspect of your decision to join us, we do hope you also spend time considering why our mission and culture are right for you. We are creating something transformational here, and we hope you are as excited about the future as we are.
Fireblocks' mission is to enable every business to easily and securely access digital assets and cryptocurrencies. In order to do that, we strongly believe our workforce should be as diverse as our clients, and this is why we embrace diversity and inclusion in all its forms.
Please see our candidate privacy policy here.
How to Get Visa Sponsorship as an Incident Response Engineer
Target sectors with established sponsorship history
Large financial institutions, cloud providers, and defense contractors sponsor Incident Response Engineers regularly. These employers have dedicated immigration teams and file H-1B petitions as a standard part of hiring, making them far more predictable sponsors than mid-market companies.
Document your degree-to-role alignment carefully
USCIS scrutinizes specialty occupation claims for security roles. A degree in computer science, cybersecurity, or information systems maps cleanly. If your degree is in a related field, prepare a credentials evaluation letter that connects your coursework directly to incident response work.
Certifications strengthen your petition significantly
CISSP, GCIH, CEH, and GCFE certifications signal industry-recognized competency and support the specialty occupation argument. Employers filing your H-1B petition benefit from petitions that include evidence beyond your degree, particularly if your role involves forensics or threat hunting.
Clarify scope before accepting an offer
Incident response roles vary widely. Some are purely reactive; others involve proactive threat hunting or red team collaboration. The job description submitted to USCIS must reflect a consistent, specialized scope. Vague or generalist descriptions raise RFE risk, so clarify duties early in the process.
Consider O-1A if you have a strong public profile
Published research, CVE disclosures, conference presentations at DEF CON or Black Hat, or peer-reviewed work in threat intelligence can support an O-1A petition. This path bypasses the H-1B lottery entirely and is worth discussing with an immigration attorney if your profile qualifies.
Clearance eligibility can expand your employer pool
Many federal contractors require security clearance eligibility for incident response roles. As a green card holder or on certain visa statuses, clearance eligibility opens government-adjacent employers that sponsor aggressively and often file cap-exempt H-1B petitions through affiliated research institutions.
Incident Response Engineer jobs are hiring across the US. Find yours.
Find Incident Response Engineer JobsSee all 80+ Incident Response Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Incident Response Engineer roles.
Get Access To All JobsFrequently Asked Questions
Does an Incident Response Engineer role qualify as a specialty occupation for H-1B purposes?
Yes, incident response engineering qualifies as a specialty occupation when the position requires at minimum a bachelor's degree in computer science, cybersecurity, information systems, or a closely related field. USCIS has approved H-1B petitions for this role consistently, though petitions that describe generalist IT duties rather than specialized security work are more likely to receive a Request for Evidence. The job description must establish that a specific degree is a normal minimum requirement for the position.
Which visa types are most common for Incident Response Engineers seeking sponsorship?
The H-1B is the most common path. The TN visa is available for Canadian and Mexican nationals if the role fits squarely within a qualifying USMCA category such as computer systems analyst. The O-1A is an option for engineers with documented recognition in the cybersecurity field, including published research, CVE credits, or speaking history at major security conferences. L-1B is available for intracompany transfers with specialized knowledge.
What if my degree is in a field other than computer science or cybersecurity?
A directly related degree is not always required, but the connection must be defensible. Degrees in electrical engineering, mathematics, or management information systems have supported specialty occupation arguments when paired with strong work experience and a credentials evaluation. If your degree is in an unrelated field, three years of progressive work experience can substitute for each year of missing education, but the combination must clearly support the specialized nature of the role.
How can I find Incident Response Engineer jobs that offer visa sponsorship?
Migrate Mate filters job listings specifically by visa sponsorship availability, so you can browse incident response roles where employers have already indicated willingness to sponsor. This is more reliable than applying broadly and asking about sponsorship later, which wastes time on companies that won't sponsor or have no immigration infrastructure in place.
Are H-1B approval rates for cybersecurity roles affected by recent policy changes?
USCIS denial and RFE rates for cybersecurity roles increased during periods of heightened scrutiny around specialty occupation definitions, particularly for roles with broad or ambiguous job duties. Petitions that clearly establish a specific degree requirement, define specialized tasks, and include supporting evidence from the employer tend to perform better. Working with an experienced immigration attorney to draft the petition is worth the investment given the scrutiny this category can attract.
What is the prevailing wage requirement for sponsored Incident Response Engineer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.
See which Incident Response Engineer employers are hiring and sponsoring visas right now.
Search Incident Response Engineer Jobs