Security Incident Response Engineer - Threat Hunter & IR

Acrisure; Grand Rapids (MI); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Job summary

Acrisure is seeking a Security Incident Response Engineer to detect, investigate, contain, eradicate, and recover from cybersecurity incidents across our global environment. You will collaborate with Infrastructure, Cloud, Identity, Legal, Privacy, HR, and business units to rapidly respond to threats and reduce risk.

The role combines hands-on incident response, threat hunting, detection tuning, forensics, and continuous improvement to reduce MTTR and incident impact.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related discipline.
• Minimum 3 years of progressive information security experience.
• Strong understanding of incident response methodologies, attack lifecycle, and containment strategies.
• Experience with one or more EDR platforms such as Microsoft Defender for Endpoint, SentinelOne, CrowdStrike, or equivalent.
• Experience with SIEM technologies such as Microsoft Sentinel, Google SecOps, Splunk, QRadar, or similar platforms.
• Knowledge of Microsoft 365, Entra ID, Active Directory, and cloud security concepts.
• Understanding of MITRE ATT&CK, threat intelligence, and threat hunting methodologies.
• Familiarity with Windows, Linux, and macOS operating systems.
• Ability to analyze logs, indicators of compromise (IOCs), and attacker techniques.
• Experience with PowerShell, Python, KQL, or other scripting/query languages.

Responsibilities

• Investigate and respond to cybersecurity incidents involving endpoints, identities, cloud platforms, email systems, applications, data, and network infrastructure.
• Perform incident triage, severity classification, impact analysis, containment, eradication, and recovery activities.
• Coordinate response efforts across Security, Infrastructure, Cloud, IAM, Workplace Technology, Legal, Privacy, Human Resources, and business teams.
• Support major incident management activities and provide technical leadership during active security events.
• Maintain detailed incident records, timelines, evidence, findings, and lessons learned.
• Develop and maintain incident response playbooks and runbooks.

Skills

Incident response

Threat hunting

Forensic analysis

Windows/macOS/Linux familiarity

Scripting (PowerShell/Python)

Education

Bachelor’s degree in Computer Science or related field

Tools

EDR platforms

SIEM platforms

PowerShell

Python

KQL

Job description

Acrisure is seeking a Security Incident Response Engineer to detect, investigate, contain, eradicate, and recover from cybersecurity incidents across our global environment. You will collaborate with Infrastructure, Cloud, Identity, Legal, Privacy, HR, and business units to rapidly respond to threats and reduce risk.

The role combines hands-on incident response, threat hunting, detection tuning, forensics, and continuous improvement to reduce MTTR and incident impact.