Security Operations Engineer III - Incident Response

ManpowerGroup Global, Inc.; Blue Ash (OH); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Medical plan

Dental plan

Vision plan

HSA

FSA

Life Insurance

Disability Insurance

Travel Insurance

401(k) with match

Weekly pay

Job summary

ManpowerGroup Global, Inc. is seeking an Engineer Level 3 to join its Security Operations team in Blue Ash, OH. The role focuses on investigating security events and coordinating incident response across endpoints, cloud, and identity-related incidents.

Ideal candidates bring hands-on IR experience, strong problem-solving, and the ability to communicate technical findings to diverse stakeholders. The position offers a dynamic, security‑driven environment with growth opportunities.

Qualifications

• Extensive experience in Security Operations, investigations and incident response.
• Hands-on experience investigating and responding to security events and incidents.
• Knowledge of security tooling such as SIEM/SOAR, EDR, email security gateways and firewalls.
• Understanding of security frameworks and ability to develop or maintain security playbooks.
• Strong critical-thinking, problem-solving and effective communication abilities.

Responsibilities

• Support day-to-day Security Operations, focusing on investigating security events and responding to incidents.
• Lead containment, eradication, and recovery across endpoint, cloud, and identity-related incidents.
• Serve as escalation point for complex security events and coordinate response strategies.
• Develop and maintain security playbooks and runbooks to streamline incident response.
• Communicate technical findings clearly to both technical and non-technical stakeholders.

Skills

Security Operations

Investigation & IR

Communication skills

Critical thinking

Tools

SIEM/SOAR

EDR

Email security gateways

Firewalls

Job description

ManpowerGroup Global, Inc. is seeking an Engineer Level 3 to join its Security Operations team in Blue Ash, OH. The role focuses on investigating security events and coordinating incident response across endpoints, cloud, and identity-related incidents.

Ideal candidates bring hands-on IR experience, strong problem-solving, and the ability to communicate technical findings to diverse stakeholders. The position offers a dynamic, security‑driven environment with growth opportunities.