Dynamic Security Incident Responder

Acrisure, LLC; Atlanta (GA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life and disability insurance

401(k) plan

Wellness resources

Paid time off

Job summary

Acrisure is seeking a Security Incident Response Engineer to detect, investigate, contain, eradicate, and recover from cybersecurity incidents across our global environment. You will work with cross-functional teams to rapidly respond to threats and reduce risk, leveraging EDR, SIEM, and cloud security platforms.

The role emphasizes hands-on incident response, threat hunting, forensics, and continuous improvement.

Qualifications

• Bachelor’s degree in CS, information security, cybersecurity, or related discipline (or equivalent experience).
• Minimum 3 years of progressive information security experience.
• Experience with one or more EDR platforms such as Microsoft Defender for Endpoint, SentinelOne, CrowdStrike, or equivalent.
• Experience with SIEM technologies such as Microsoft Sentinel, Google SecOps, Splunk, QRadar, or similar platforms.
• Knowledge of Microsoft 365, Entra ID, Active Directory, and cloud security concepts.
• Understanding of MITRE ATT&CK, threat intelligence, and threat hunting methodologies.
• Familiarity with Windows, Linux, and macOS operating systems.
• Ability to analyze logs, indicators of compromise (IOCs), and attacker techniques.
• Experience with PowerShell, Python, KQL, or other scripting/query languages.

Responsibilities

• Investigate and respond to cybersecurity incidents involving endpoints, identities, cloud platforms, email systems, applications, data, and network infrastructure.
• Coordinate response efforts across Security, Infrastructure, Cloud, IAM, Workplace Technology, Legal, Privacy, Human Resources, and business teams.
• Develop and maintain incident response playbooks, investigation procedures, and operational runbooks.
• Tune security alerts and detection logic to improve fidelity and reduce false positives.
• Produce incident reports, executive summaries, and post-incident reviews.

Skills

incident response

threat hunting

log analysis

PowerShell

Python

KQL

Windows

Linux

macOS

Education

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related discipline

Tools

Microsoft Defender for Endpoint

SentinelOne

CrowdStrike

Microsoft Sentinel

Splunk

QRadar

Job description

Acrisure is seeking a Security Incident Response Engineer to detect, investigate, contain, eradicate, and recover from cybersecurity incidents across our global environment. You will work with cross-functional teams to rapidly respond to threats and reduce risk, leveraging EDR, SIEM, and cloud security platforms.

The role emphasizes hands-on incident response, threat hunting, forensics, and continuous improvement.