Lead Security Incident Response & Threat Detection

HUB International; Chicago (IL); On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Health/dental/vision insurance

401(k) with company match

Paid time off

Job summary

HUB International is seeking a Security Incident Response Manager to lead the IR team, detect and contain threats, and drive proactive threat hunting. The role covers full incident lifecycle, from detection to post-incident review, across cloud and on-premises environments.

You will mentor staff, improve processes, and report KPIs (MTTD/MTTR) to leadership. The position requires a Bachelor’s degree and 10+ years in security with strong analytical skills. Salary range is $130,000–$150,000.

Qualifications

• Bachelor’s degree in technology or applicable experience.
• 10+ years of programming/scripting experience (Powershell, Python, shell).
• 3+ years cloud infrastructure experience (AWS, Azure, GCP).
• 5+ years Active Directory/O365 experience.
• 5+ years security platforms, automation tooling experience.
• Hands-on with SIEM, EDR, and SOAR platforms for detection and investigation.
• Experience with DFIR including logs and chain-of-custody.
• Familiarity with NIST/SANS incident response frameworks.

Responsibilities

• Lead a Security Incident Response Team for threat detection and remediation.
• Ensure investigations follow forensic methodology with proper log analysis.
• Manage 24/7 incident response operations and on-call rotation.
• Develop scalable incident response processes and playbooks.
• Drive KPI-based maturity of IR and detection engineering functions.
• Coordinate cross-team efforts to improve security posture.

Skills

Programming experience

Cloud experience

Active Directory / Entra

Security platforms

Forensics / DFIR

Incident response frameworks

KPIs / metrics

Team leadership

collaboration

Education

Bachelor’s degree

Tools

SIEM

EDR

SOAR

Microsoft Entra

Job description

HUB International is seeking a Security Incident Response Manager to lead the IR team, detect and contain threats, and drive proactive threat hunting. The role covers full incident lifecycle, from detection to post-incident review, across cloud and on-premises environments.

You will mentor staff, improve processes, and report KPIs (MTTD/MTTR) to leadership. The position requires a Bachelor’s degree and 10+ years in security with strong analytical skills. Salary range is $130,000–$150,000.