Join the team leading the next evolution of virtual care.

At Teladoc Health, you are empowered to bring your true self to work while helping millions of people live their healthiest lives.

Here you will be part of a high-performance culture where colleagues embrace challenges, drive transformative solutions, and create opportunities for growth. Together, we’re transforming how better health happens.

Summary of Position

Teladoc Health is seeking an experienced Cyber Incident Response Lead to spearhead our organization's efforts in responding to cybersecurity incidents. This role will lead complex incident investigations, coordinate cross-functional response efforts during security events, drive containment/eradication/recovery activities, and continuously improve the incident response program. This position combines hands-on technical response leadership with strategic oversight, stakeholder communication (including executive-level), and mentorship of analysts/engineers. You will serve as a key escalation point for high-severity incidents and help shape the organization's resilience against evolving threats (ransomware, supply-chain attacks, nation-state actors, etc.).

Essential Duties and Responsibilities

You will lead end-to-end incident response activities, from initial triage and containment through eradication, recovery, and post-incident review. You'll develop and continuously improve incident response playbooks, runbooks, and standard operating procedures, ensuring the team is prepared for a wide range of threat scenarios. During active incidents, you'll serve as the primary point of coordination between technical teams, senior leadership, legal, and communications stakeholders.

Beyond incident management, you'll conduct threat hunting exercises and proactive analysis to identify indicators of compromise before they escalate. You'll mentor and develop junior analysts, conduct tabletop exercises and simulations, and track lessons learned to drive meaningful improvements to our security posture. You will also manage relationships with external forensics firms, law enforcement, and industry threat-sharing groups as needed.

Qualifications Expected for Position

7+ years of experience in cybersecurity, with at least 5 years in an incident response or SOC lead capacity
Deep hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel), EDR tools, and network forensics
Strong understanding of attacker tactics, techniques, and procedures (TTPs) as mapped to the MITRE ATT&CK framework
Proficiency in digital forensics, malware triage, and log analysis across Windows, Linux, and cloud environments
Experience leading response efforts for major incident types including ransomware, data exfiltration, BEC, and insider threats
Excellent communication skills — able to translate technical findings into clear, executive-level briefings
Relevant certifications such as GCIH, GCFE, GCFA, CISSP, or equivalent

Preferred Qualifications

Experience with cloud security incidents across AWS and Azure.
Familiarity with regulatory and legal considerations (e.g., HIPAA, PCI-DSS breach notification requirements)
Prior experience in regulated industries (finance, healthcare, critical infrastructure) or supporting executive-level communications during breaches.
Experience leading small-to-medium IR teams or acting as primary incident commander.

The base salary range for this position is $160,000 - $170,000. In addition to a base salary, this position is eligible for a performance bonus and benefits (subject to eligibility requirements) listed here: Teladoc Health Benefits 2026. Total compensation is based on several factors including, but not limited to, type of position, location, education level, work experience, and certifications. This information is applicable for all full-time positions.

We follow a Flexible Vacation Policy, intended for rest, relaxation, and personal time. All time off must be approved by your manager prior to use. You will also receive 80 hours of Paid Sick, Safe, and Caregiver Leave annually. This applies to full-time positions only. If you are applying for a part-time role, your recruiter can provide additional details.

As part of our hiring process, we verify identity and credentials, conduct interviews (live or video), and screen for fraud or misrepresentation. Applicants who falsify information will be disqualified.

Teladoc Health will not sponsor or transfer employment work visas for this position. Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.

Why join Teladoc Health?

Teladoc Health is transforming how better health happens. Learn how when you join us in pursuit of our impactful mission.
Chart your career path with meaningful opportunities that empower you to grow, lead, and make a difference.
Join a multi-faceted community that celebrates each colleague’s unique perspective and is focused on continually improving, each and every day.
Contribute to an innovative culture where fresh ideas are valued as we increase access to care in new ways.
Enjoy an inclusive benefits program centered around you and your family, with tailored programs that address your unique needs.
Explore candidate resources with tips and tricks from Teladoc Health recruiters and learn more about our company culture by exploring #TeamTeladocHealth on LinkedIn.

As an Equal Opportunity Employer, we never have and never will discriminate against any job candidate or employee due to age, race, religion, color, ethnicity, national origin, gender, gender identity/expression, sexual orientation, membership in an employee organization, medical condition, family history, genetic information, veteran status, marital status, parental status, or pregnancy). In our innovative and inclusive workplace, we prohibit discrimination and harassment of any kind.

Teladoc Health respects your privacy and is committed to maintaining the confidentiality and security of your personal information. In furtherance of your employment relationship with Teladoc Health, we collect personal information responsibly and in accordance with applicable data privacy laws, including but not limited to, the California Consumer Privacy Act (CCPA). Personal information is defined as: Any information or set of information relating to you, including (a) all information that identifies you or could reasonably be used to identify you, and (b) all information that any applicable law treats as personal information. Teladoc Health’s Notice of Privacy Practices for U.S. Employees’ Personal information is available at this link.

Incident Response Lead

Job Overview

Job Description

Ready to Apply?

Quick Apply