Security Incident Coordinator (Contract | Remote)

About
We’re looking for a Security Incident Coordinator to support the coordination and management of high-severity cybersecurity incidents.
This is not a hands-on incident responder position. You’ll work alongside incident commanders and technical security teams, keeping incidents organized, tracking critical actions and milestones, maintaining clear documentation, and making sure the right people have the information they need.
The right person understands security operations well enough to follow a technical incident, but their biggest strength is turning complex, fast-moving information into clear next steps and concise updates.
This is a remote, full-time contract role working Eastern Time hours.
What You'll Do
Coordinate multiple active cybersecurity incidents from escalation through resolution.
Maintain incident trackers, milestones, action items, owners, and next steps.
Support incident commanders with scheduling, documentation, logistics, and follow-up.
Gather information from technical teams and turn it into clear incident summaries.
Provide concise status updates for technical and non-technical stakeholders.
Serve as a central point of coordination for high-severity security incidents.
Keep incident documentation accurate and current as situations evolve.
Work across security operations and other technical teams to keep incidents moving toward resolution.
Help ensure outstanding actions and dependencies are followed through to completion.
Use security and collaboration tools to organize incident information and communication.
What We're Looking For
Experience supporting security operations, incident response, or cybersecurity incident management.
Approximately 1–2+ years of security operations or incident response experience, with additional coordination or project management experience strongly relevant.
Strong incident coordination, task tracking, and organizational skills.
Ability to understand technical security information well enough to accurately summarize and communicate it.
Experience communicating incident status and next steps to both technical and non-technical audiences.
Confidence communicating in fast-moving situations with multiple stakeholders.
Familiarity with Splunk and CrowdStrike is helpful, but deep technical expertise is not required.
Familiarity with ServiceNow or a similar incident/case management platform is helpful.
Experience in a SOC, security operations, incident response, or technical project coordination environment is strongly preferred.

Work arrangement
No