Cybersecurity Engineer

Kestra Financial, Inc.; Austin (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Kestra Financial, Inc. is seeking a Cybersecurity Incident Response Engineer in Austin to identify, analyze, and respond to security incidents across a diverse enterprise environment.

You will work with SIEM and EDR tools, threat intel frameworks, and develop and maintain incident response playbooks while collaborating with SOC, IT, and other stakeholders to contain and remediate threats and stay current with security trends.

Qualifications

• 2+ years of proven incident response experience.
• Bachelor's degree in Cybersecurity or IT.
• Security+ or equivalent certification.
• Knowledge of MITRE ATT&CK framework.
• Experience with Microsoft security tooling is a plus.

Responsibilities

• Manage alerts escalated by the SOC.
• Investigate and respond to security incidents using IDSsuite tools.
• Perform root cause analysis and develop mitigation strategies.
• Develop and maintain incident response playbooks and procedures.
• Conduct threat hunting using KQL and Sentinel workbooks.
• Collaborate with SOC analysts, IT, and stakeholders to contain and remediate threats.
• Participate in audits by providing incident response documentation.

Skills

Incident response

SOC collaboration

Threat hunting

Security incident analysis

MITRE ATT&CK

Education

Bachelor's degree in Cybersecurity or IT

Tools

KQL

Sentinel

IDSsuite

Job description

Lead with Purpose. Partner with Impact.

We areseekinga Cybersecurity Incident Response Engineer to join our team and help defend our organization against evolving cyber threats. This role focuses onidentifying, analyzing, and responding to security incidents across a diverse enterprise environment. The ideal candidate will have experience working with modern security information and event management (SIEM) platforms, endpoint detection and response (EDR) tools, and threat intelligence frameworks.

What you'll Do:

• Manage alerts escalated by the SOC.

• Challenge the SOC onpotentially overlooked incidents.

• Investigate and respond to security incidents usingIDSsuite tools.

• Perform root cause analysis and develop mitigation strategies.

• Perform audits.

• Collaborate with SOC analysts, IT, and other stakeholders tocontainand remediate threats.

• Continuous Learning:Stayup to datewith security trends, vulnerabilities, and best practices.

• Develop andmaintainincident response playbooks and procedures.

• Conduct threat hunting activities using KQL and Sentinel workbooks.

• Stay current with emerging threats, vulnerabilities, and security technologies.

• Conduct digital forensics investigations toidentifyindicators of compromise (IOCs),determineattack vectors, and preserve evidencein accordance withlegal and organizational standards.

• Support internal and external audit activities by providing incident response documentation andevidence.

• Contributesto the development and refinement of security policies, procedures, and operational practices.

• Participate in red team and adversary simulation exercises to improve detection and response capabilities.

What You Bring:

• 2+ years of proven experience in a similar role.
• Bachelor's degree inCybersecurity,ITor equivalent experience.
• Security+ or equivalent certification (Microsoftsecurity certifications are a plus)
• A strong understanding of theMitreAttack/Cyber Kill-Chain.
• Proficiency/hands-onexperienceinMicrosoft security toolingis a plus.