[Skip to main content](#main-content)

[ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/)

Stryker · Kalamazoo, Michigan

# Principal, Cybersecurity Incident Responder - Remote

Kalamazoo, Michigan Remote Full-time Senior individual contributor $135,600 - $225,900 Security 

Listed on Stryker’s official careers site. Posted November 6, 2026. Check that it is still open and apply there.
[Apply on Stryker’s careers site →](https://stryker.wd1.myworkdayjobs.com/StrykerCareers/job/Kalamazoo-Michigan/Principal--Cybersecurity-Incident-Responder---Remote_R575345)

[OpenNash Jobs](https://jobs.opennash.com/) / [Stryker](https://jobs.opennash.com/companies/stryker/) / Principal, Cybersecurity Incident Responder - Remote

## Job description

### Work Flexibility

Remote The Principal Cybersecurity Incident Responder is a senior technical cybersecurity leader responsible for leading the response to significant and complex cybersecurity incidents. This role establishes technical priorities, drives investigations, and guides incidents through containment, eradication, and recovery. You will apply broad cybersecurity expertise and deep, hands-on incident response experience to make timely, risk-based decisions in complex and rapidly evolving situations.

During significant incidents, you will serve as the Technical Response Lead, partnering closely with Investigations, Detection Engineering, Security Engineering, Cyber Threat Intelligence (CTI), Threat Hunting, Forensics, Security Operations, and other cybersecurity specialists. Outside of active incidents, you will strengthen response readiness by improving playbooks, exercises, telemetry, tooling, automation, and lessons-learned processes, including identifying responsible opportunities to leverage AI.

Preference will be given to candidates located in Eastern or Central time zones to support effective collaboration during core business hours. Essential duties & responsibilities Lead the technical response to significant and complex cybersecurity incidents from initial investigation through containment, eradication, and recovery. Establish technical priorities, maintain momentum, and make timely, risk-based decisions when information is incomplete, conflicting, or rapidly changing.

Partner across Investigations, Detection Engineering, Security Engineering, CTI, Threat Hunting, Forensics, Security Operations, and other teams to determine incident scope and coordinate response actions. Apply deep knowledge of attacker tactics, techniques, and procedures to incidents involving identity compromise, ransomware, malware, cloud compromise, lateral movement, data exfiltration, and other advanced threats.

Evaluate investigative findings, identify critical gaps, test hypotheses, and translate available evidence into effective containment, eradication, and recovery strategies. Balance rapid containment with business impact, operational continuity, evidence preservation, and the need to fully understand incident scope. Develop and continuously improve incident response playbooks, procedures, and technical capabilities based on real-world incidents, exercises, emerging threats, and lessons learned.

Design and facilitate technical tabletop exercises and simulations to validate response capabilities and identify improvement opportunities. Identify telemetry, tooling, access, and visibility gaps and partner with technical teams to strengthen detection and response capabilities. Leverage AI, automation, and orchestration where appropriate to accelerate investigation and response while maintaining appropriate human oversight.

Lead technical contributions to post-incident reviews and drive improvements across telemetry, detections, tooling, automation, procedures, and training. Serve as a senior technical resource and mentor, strengthening incident response capabilities and decision-making across the cybersecurity organization.

### Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Security, or a related field, or an equivalent combination of education and relevant professional experience. 8+ years of relevant cybersecurity experience across incident response, digital forensics, threat hunting, security operations, security engineering, or related disciplines. Relevant industry certifications in incident response, digital forensics, security operations, cloud security, or related cybersecurity disciplines preferred.

### Preferred Qualifications

CISSP - Preferred GCIH - Preferred Other relevant Incident Response certification - (e.g., ECIH, OSIR) Digital Forensics certification - e.g., GCFA, GCFE, CHFI) CISM GSOC Demonstrated experience leading the technical response to significant or complex cybersecurity incidents involving multiple technical teams and stakeholders. Significant hands-on experience investigating and responding to a range of sophisticated cyberattacks.

Strong understanding of modern attacker tactics, techniques, and procedures and the ability to apply that knowledge during active incidents. Broad technical knowledge of endpoint, identity, network, cloud, email, and enterprise security technologies, including the telemetry used to investigate attacks across these environments. Demonstrated ability to evaluate evidence, test hypotheses, identify investigative gaps, and make sound decisions with incomplete or rapidly changing information.

Experience developing or improving incident response playbooks, procedures, exercises, or operational capabilities. Ability to communicate complex technical situations clearly and concisely to technical responders, cybersecurity leadership, and non-technical stakeholders. Ability to coordinate and influence cross-functional technical teams without direct authority and operate effectively in a high-pressure, global environment.

### United States of America Pay Ranges

USN: $135,600 - $225,900 USD Annual US5: $142,400 - $237,200 USD Annual US10: $149,200 - $248,500 USD Annual US15: $155,900 - $259,800 USD Annual US20: $162,700 - $271,100 USD Annual US30: $176,300 - $293,700 USD Annual View the U.S. work location and transparency guide to find the pay range for your location.

### Travel Percentage

20% Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability. Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

## At a glance
- Posted by the employer: Nov 6, 2026
- First seen by OpenNash: Nov 8, 2026
- Last checked: Nov 8, 2026
- Listed for: 2 days
- Location: Kalamazoo, Michigan
- Work arrangement: Remote
- Employment type: Full-time
- Pay: $135,600 - $225,900[Apply on Stryker’s careers site →](https://stryker.wd1.myworkdayjobs.com/StrykerCareers/job/Kalamazoo-Michigan/Principal--Cybersecurity-Incident-Responder---Remote_R575345)

## Hiring at Stryker
- Open jobs: 1,449
- New in the last 7 days: After two weekly collections
- Tracked since: Jul 10, 2026

[All Stryker jobs](https://jobs.opennash.com/companies/stryker/) · [Weekly hiring report](/reports/hiring/)

## More jobs at Stryker

### [Quality Specialist](https://jobs.opennash.com/companies/stryker/jobs/668038649ab802a42d05/)

Kalamazoo, Michigan

### [Senior Implementation Engineer](https://jobs.opennash.com/companies/stryker/jobs/058b17673eec39e41927/)

Kalamazoo, Michigan

### [Senior Manager, Supply Planning](https://jobs.opennash.com/companies/stryker/jobs/d3d7bba6dc545fc8abf4/)

Kalamazoo, Michigan

### [Senior Quality Engineer](https://jobs.opennash.com/companies/stryker/jobs/320284a73a6e90254828/)

Kalamazoo, Michigan

### [Senior Manager, Cybersecurity, AI SOC & Crisis Management - Remote](https://jobs.opennash.com/companies/stryker/jobs/2f7f5822f53a71612536/)

Michigan

## Similar jobs at other companies

### [Cyber Defense & Incident Responder](https://jobs.opennash.com/companies/ntt/jobs/c214150e31a4ff7d5d41/)

NTT · Merrifield, VA, US, United States

### [Cyber Incident Analyst Responder – Regional CNDA (26-457) Space AHT](https://jobs.opennash.com/companies/northrop-grumman/jobs/9ca0f84677c910cc7a31/)

Northrop Grumman · United States-Colorado-Schriever AFB

### [Cyber Incident Responder](https://jobs.opennash.com/companies/ubs/jobs/7cc194dcb7d71e480208/)

UBS · United States

[Security jobs](/functions/security/)

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

[ OpenNash ](https://opennash.com/)

AI-native services firm that builds custom software and 24/7 AI agents.

OpenNash Jobs is an OpenNash Applied AI project.
[Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1)

Jobs
- [Search jobs](https://jobs.opennash.com/search/)
- [Companies](https://jobs.opennash.com/explore/)
- [Hiring report](https://jobs.opennash.com/reports/hiring/)
- [AI assistants](https://jobs.opennash.com/connect/)
- [How it works](https://jobs.opennash.com/methodology/)

OpenNash
- [opennash.com](https://opennash.com/)
- [Services](https://opennash.com/ai-agent-consulting/)
- [OpenNash CX](https://opennash.com/cx/)
- [AI Tools](https://opennash.com/ai-tools/)
- [Blog](https://opennash.com/blog/)
- [About](https://opennash.com/about/)

Contact
- [hello@opennash.com](mailto:hello@opennash.com)

- [LinkedIn](https://www.linkedin.com/company/opennash)

- [Support](https://jobs.opennash.com/support/)

- [Privacy](https://jobs.opennash.com/privacy/)

- [Terms](https://jobs.opennash.com/terms/)

© 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.