Security Engineer, Operations & Incident Response

Sunmed Llc; Grand Rapids (MI); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

AirLife is seeking a Security Engineer in Grand Rapids, MI to monitor, triage, and investigate security events across SIEM/EDR, lead incident response, and continuously improve detection and automation. You will partner with Arctic Wolf, IT, and Cloud teams to remediate vulnerabilities and strengthen security posture.

The role requires 3–5 years in IT with 2+ years in SOC, and a Bachelor's in a related field or equivalent experience. Travel up to 10% may be required.

Qualifications

• Experience with SIEM, log analysis, and alert triage.
• Led incident response activities in an enterprise.
• Detection engineering and MDR/MSSP tuning experience.
• Knowledge of EDR, vulnerability management, and cloud security posture.
• Developing incident response playbooks and runbooks.
• Understanding of Zero Trust principles in security operations.
• Familiarity with NIST/CIS/ISO 27001/GDPR.
• Security automation/orchestration experience.
• Working knowledge of Active Directory/Entra ID.
• Ability to manage multiple incidents and tasks in a dynamic environment.
• Backup/DR systems knowledge (Rubrik/Azure).
• KnowBe4 security awareness administration.

Responsibilities

• Monitor, triage, and investigate security events across SIEM/EDR.
• Lead incident response activities and post-incident reviews.
• Improve detection rules and alert quality to reduce false positives.
• Operate and integrate SIEM, EDR, vulnerability management, and cloud security tools.
• Develop and maintain incident response playbooks and SOPs.
• Collaborate with Arctic Wolf on alert tuning and investigations.
• Remediate vulnerabilities with Infrastructure, Cloud, IT, and Applications teams.
• Support vulnerability management program and remediation tracking.
• Track security metrics for leadership reporting.
• Participate in on-call rotation for after-hours response.
• Contribute to backup and disaster recovery efforts.

Skills

SIEM concepts

Incident response leadership

Detection engineering

EDR/endpoint security

Vulnerability management

Cloud security

IR playbooks

Zero Trust

Security compliance

Automation/orchestration

Active Directory

Smartsheet

Root cause analysis

Backup & DR

Security awareness training

Education

Bachelor's Degree in Cybersecurity/IT/CS

Security certifications (CompTIA Security+, GCIH, GCFA)

Tools

Microsoft Defender

Rubrik

Azure

Arctic Wolf

KnowBe4

Job description

AirLife is seeking a Security Engineer in Grand Rapids, MI to monitor, triage, and investigate security events across SIEM/EDR, lead incident response, and continuously improve detection and automation. You will partner with Arctic Wolf, IT, and Cloud teams to remediate vulnerabilities and strengthen security posture.

The role requires 3–5 years in IT with 2+ years in SOC, and a Bachelor's in a related field or equivalent experience. Travel up to 10% may be required.