Cybersecurity Incident Response Engineer

Allegacy; Winston-Salem (NC); On-site; USD 90,000 - 130,000; Full time

Job summary

Allegacy seeks a skilled Incident Response Analyst to protect member data and assets. You will monitor security tooling, triage alerts, and investigate suspicious activity across Windows/Linux logs, network data, and access events.

You will execute containment, eradication, and recovery actions with IT and application teams, document findings, and continually improve playbooks. The role involves collaboration with MDR providers and external partners to strengthen resilience.

Qualifications

• Strong problem solving and analytical skills; able to make quick decisions during incident response.
• Strong verbal and written communication; clearly convey security concepts to all business areas.
• Highly adaptable to a changing business and tech environment.
• Familiarity with financial services security standards (GLBA, NCUA, FFIEC, PCI DSS, SOX).
• Hands-on incident response experience (triage, containment, eradication, recovery).
• Ability to analyze security telemetry (Windows/Linux logs, firewall logs, DNS, proxy, auth logs).
• Experience with security monitoring and detection tools (SIEM dashboards, EDR).
• Knowledge of IAM concepts (MFA, privileged access) and investigation points for auth incidents.

Responsibilities

• Monitor security tooling (SIEM, EDR, email/web security, firewall/VPN logs) and triage alerts.
• Investigate suspicious activity by analyzing logs and correlating events across systems.
• Execute incident response actions in partnership with IT and apps teams; isolate hosts and support remediation.
• Collect and preserve incident evidence and maintain chain-of-custody.
• Develop and improve incident response playbooks; participate in tabletop exercises.
• Tune detections and reduce false positives; work with tool owners on alert logic.
• Support vulnerability response by tracking remediation and coordinating patches.
• Coordinate with MDR provider, vendors, and law enforcement as directed.

Skills

Incident response

Threat hunting

Log analysis

Forensics

Communication

Regulatory knowledge

Education

Bachelor’s degree

Tools

SIEM

EDR

Job description

Allegacy seeks a skilled Incident Response Analyst to protect member data and assets. You will monitor security tooling, triage alerts, and investigate suspicious activity across Windows/Linux logs, network data, and access events.

You will execute containment, eradication, and recovery actions with IT and application teams, document findings, and continually improve playbooks. The role involves collaboration with MDR providers and external partners to strengthen resilience.