Security Engineer

Old Republic; Tampa (FL); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Old Republic in Tampa, FL is seeking an experienced Information Security Engineer – Security Operations to support enterprise-wide detection, response, and operational security across on‑premises, cloud, and hybrid environments. You will work with IT operations and subsidiary teams to ensure effective controls and continuous monitoring.

The role requires 5–8+ years in cybersecurity, hands-on experience with EDR/XDR, SIEM, and Splunk, and knowledge of NIST/ISO frameworks.

Qualifications

• 5–8+ years of experience in cybersecurity, security operations, or security engineering roles.
• Hands-on experience with EDR/XDR, email security, network security, and SIEM platforms.
• Experience supporting Zero Trust security models, including identity-centric access and continuous validation.
• Strong experience administering Splunk environments, working with SIEM platforms, and utilizing CrowdStrike for endpoint detection, threat monitoring, and incident response.
• Experience across on-premises, cloud, and hybrid environments.
• Knowledge of security frameworks such as NIST, ISO/IEC 27001, CIS, and SOX.
• Strong written and verbal communication and documentation skills.

Responsibilities

• Implement, configure, and maintain security operations technologies and controls aligned with enterprise security standards.
• Operate and continuously improve security monitoring, alerting, and logging capabilities.
• Monitor, analyze, investigate, and respond to security alerts, incidents, and control failures.
• Participate in a rotating on-call schedule to support 24×7 incident response coverage, including after-hours response as required.
• Lead and contribute to incident response activities including containment, remediation, escalation, and post-incident root cause analysis.
• Develop, tune, and maintain detection logic, alert thresholds, and operational workflows.
• Support SIEM, EDR/XDR, email security, network security, and security automation platforms.
• Partner with infrastructure, application, and subsidiary IT teams to remediate security findings and operational gaps.
• Maintain incident response procedures, playbooks, and operational runbooks.
• Support audit, compliance, and risk activities through control validation and evidence collection.
• Mentor less experienced team members and promote consistent SecOps best practices.
• Report security incidents, trends, and operational metrics to leadership.
• Perform other duties as assigned.

Skills

Communication skills

Security operations

Cybersecurity fundamentals

Education

Bachelor's or Master's degree in CS/IS

Tools

Splunk

CrowdStrike

SIEM platforms

EDR/XDR

Email security

Network security

Job description

Location/Schedule: Tampa, FL/Hybrid, 2 days in-office

Classification: Full-Time/Exempt

Who We Are:

Old Republic is a leading specialty insurer that operates diverse property & casualty, as well as title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.

Position Overview:

Old Republic is seeking an experienced Information Security Engineer – Security Operations (SecOps) to support enterprise-wide detection, response, and operational security capabilities across the organization and its subsidiary operating companies.

This role focuses on the operational execution and effectiveness of cybersecurity controls, including security monitoring, incident response, detection engineering, and control validation across on‑premises, cloud, and hybrid environments. The role partners closely with IT operations, infrastructure, application teams, and subsidiary IT organizations to ensure controls are effective, sustainable, and aligned with business operations.

Essential Job Functions:

• Implement, configure, and maintain security operations technologies and controls aligned with enterprise security standards.
• Operate and continuously improve security monitoring, alerting, and logging capabilities.
• Monitor, analyze, investigate, and respond to security alerts, incidents, and control failures.
• Participate in a rotating on‑call schedule to support 24×7 incident response coverage, including after‑hours response as required.
• Lead and contribute to incident response activities including containment, remediation, escalation, and post‑incident root cause analysis.
• Develop, tune, and maintain detection logic, alert thresholds, and operational workflows.
• Support SIEM, EDR/XDR, email security, network security, and security automation platforms.
• Partner with infrastructure, application, and subsidiary IT teams to remediate security findings and operational gaps.
• Maintain incident response procedures, playbooks, and operational runbooks.
• Support audit, compliance, and risk activities through control validation and evidence collection.
• Mentor less experienced team members and promote consistent SecOps best practices.
• Report security incidents, trends, and operational metrics to leadership.
• Perform other duties as assigned.

Qualifications:

• 5–8+ years of experience in cybersecurity, security operations, or security engineering roles.
• Hands‑on experience with EDR/XDR, email security, network security, and SIEM platforms.
• Experience supporting Zero Trust security models, including identity‑centric access and continuous validation.
• Strong experience administering Splunk environments, working with SIEM platforms, and utilizing CrowdStrike for endpoint detection, threat monitoring, and incident response.
• Experience across on‑premises, cloud, and hybrid environments.
• Knowledge of security frameworks such as NIST, ISO/IEC 27001, CIS, and SOX.
• Strong written and verbal communication and documentation skills.
• Bachelor’s or Master’s degree in Computer Science, Information Systems, or a related field (or equivalent experience).
• Security or operations‑focused certifications are a plus.

ORI is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.