Cybersecurity Incident Response Engineer

Allegacy Financial; Winston-Salem (NC); On-site; USD 90,000 - 135,000; Full time

Job summary

Allegacy Financial is seeking an Incident Response Specialist to join our cybersecurity team in Winston-Salem. You will monitor security tooling, investigate alerts, and coordinate containment and remediation with IT, applications, and our MDR partner to reduce risk and protect member data.

You’ll develop playbooks, tune detections, and lead post-incident reviews while staying current with threat landscapes and regulatory requirements applicable to financial services.

Qualifications

• Strong problem solving and analytical skills.
• Excellent verbal and written communication abilities.
• Adaptability in a changing tech environment.
• Familiarity with financial security standards (GLBA, FFIEC, PCI DSS).
• Hands-on incident response experience and playbook usage.
• Ability to analyze security telemetry and logs.
• Experience with security monitoring/detection tools.
• Knowledge of IAM concepts and authentication incidents.
• Familiarity with data protection controls and data exposure investigation.
• Understanding of risk management and business impact of incidents.

Responsibilities

• Monitor security tooling (SIEM/EDR) and triage alerts to determine scope and response.
• Investigate suspicious activity by analyzing logs and telemetry.
• Execute containment, eradication, and recovery actions with IT and apps teams.
• Collect and preserve incident evidence; support forensic activities with chain-of-custody.
• Develop and maintain incident response playbooks; participate in tabletop exercises.
• Tune detections; reduce false positives; improve alert logic and automation.
• Support vulnerability response; track remediation and mitigations.
• Coordinate with internal teams and MDR provider during investigations.
• Implement security changes to support IR outcomes and hardening items.
• Participate in on-call rotation; communicate status and escalate as needed.
• Leverage MITRE ATT&CK; perform light threat hunting to identify malicious activity.
• Stay current on threat landscape; recommend process and control improvements.

Job description

Allegacy Financial is seeking an Incident Response Specialist to join our cybersecurity team in Winston-Salem. You will monitor security tooling, investigate alerts, and coordinate containment and remediation with IT, applications, and our MDR partner to reduce risk and protect member data.

You’ll develop playbooks, tune detections, and lead post-incident reviews while staying current with threat landscapes and regulatory requirements applicable to financial services.