Incident Response Engineer — Cyber Threat Defender

Royal Abstract of New York LLC; Atlanta (GA); On-site; USD 90,000 - 130,000; Full time

Job summary

Acrisure is seeking a Security Incident Response Engineer to detect, investigate, contain, eradicate, and recover from cybersecurity incidents across our global environment. You will work with Infrastructure, Cloud, IAM, Legal, HR, and business stakeholders to rapidly respond to threats and reduce risk.

You'll leverage EDR, SIEM, cloud security platforms, and threat intelligence, performing hands-on incident response, threat hunting, and continuous improvement to shorten response times and

Qualifications

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related discipline (or equivalent experience).
• Minimum 3 years of progressive information security experience.
• Strong understanding of incident response methodologies, attack lifecycle, and containment strategies.
• Experience with EDR platforms such as Microsoft Defender for Endpoint, SentinelOne, CrowdStrike, or equivalent.
• Experience with SIEM technologies such as Microsoft Sentinel, Google SecOps, Splunk, QRadar, or similar platforms.
• Knowledge of Microsoft 365, Entra ID, Active Directory, and cloud security concepts.
• Understanding of MITRE ATT&CK, threat intelligence, and threat hunting methodologies.
• Familiarity with Windows, Linux, and macOS operating systems.
• Ability to analyze logs, indicators of compromise (IOCs), and attacker techniques.
• Experience with PowerShell, Python, KQL, or other scripting/query languages.

Responsibilities

• Investigate and respond to cybersecurity incidents across endpoints, identities, cloud platforms, email systems, applications, data, and network infrastructure.
• Perform incident triage, severity classification, impact analysis, containment, eradication, and recovery activities.
• Coordinate response efforts with Security, Infrastructure, Cloud, IAM, Workplace Technology, Legal, Privacy, Human Resources, and business teams.
• Support major incident management activities and provide technical leadership during active security events.
• Maintain detailed incident records, timelines, evidence, findings, and lessons learned.
• Analyze alerts from EDR, SIEM, MDR, email security, cloud security, and threat intelligence platforms.
• Proactively threat hunt to identify indicators of compromise, adversary behaviors, and emerging threats.

Skills

Incident response

Threat hunting

MITRE ATT&CK knowledge

Log analysis

Analytical thinking

Education

Bachelor's degree in CS/Info Sec

Tools

Defender for Endpoint

SentinelOne

CrowdStrike

Microsoft Sentinel

Splunk

QRadar

Microsoft 365

Entra ID

Active Directory

PowerShell

Python

KQL

Job description

Acrisure is seeking a Security Incident Response Engineer to detect, investigate, contain, eradicate, and recover from cybersecurity incidents across our global environment. You will work with Infrastructure, Cloud, IAM, Legal, HR, and business stakeholders to rapidly respond to threats and reduce risk.

You'll leverage EDR, SIEM, cloud security platforms, and threat intelligence, performing hands-on incident response, threat hunting, and continuous improvement to shorten response times and