Senior Incident Response Engineer

Western Union; Austin (TX); Hybrid; USD 165,000 - 185,000; Full time

Benefits offered by this job

Health Insurance

Tuition Assistance

Employee Discount

Parental Leave

401K Plan

Job summary

Western Union is seeking an experienced cybersecurity professional to lead incident response and threat hunting initiatives from a hybrid Austin office. The role demands strong expertise in SIEM/EDR, forensics, and cross-OS security, with a focus on containment, remediation, and lessons learned.

The candidate will coordinate with Cyber Fusion Center analysts and vendor partners, participate in Purple Team activities, and remain available for on-call incidents.

Qualifications

• Bachelor’s degree preferred in IT/Cybersecurity/CS.
• 7+ years of technology, info security, and/or app security experience.
• Expertise in top security flaws and resolutions (OWASP/SANS).
• Strong automation experience with runbooks and process automation.
• Expert with SIEM, EDR, and event correlation technologies.
• Experience with AI, generative and agentic, preferred.
• Strong cross-OS experience and security requirements knowledge.
• Knowledge of web/mobile frameworks, networks, and security controls.
• Experience with incident response, forensics, and evidence preservation.
• Ability to convey security concepts to both technical and non-technical audiences.

Responsibilities

• Performs intrusion scope and root cause analysis.
• Assists in containment and remediation actions.
• Serves as an escalation point for Cyber Fusion Center analysts.
• Supports Purple Team engagements as a subject matter expert.
• Conducts proactive Threat Hunting exercises based on threat intel.
• Collaborates with Security Operations teams to advance IR/Threat Hunting maturity.
• Conducts forensics and evidence preservation across OSes.
• Acts as a Subject Matter Expert in Incident Response lifecycle and drives containment.
• Leads during Incident Response engagements.
• Briefs Cybersecurity Leadership on incidents.

Skills

Threat Hunting

Incident Response

Automation

Cloud Security

OWASP/SANS knowledge

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

SIEM

EDR

Web Application Firewall

Cloud Security Tools

Job description

JR0130951

Role Responsibilities

• Performs intrusion scope and root cause analysis
• Assists in containment and remediation actions
• Serves as an escalation point for Cyber Fusion Center analysts
• Supports Purple Team engagements as a subject matter expert
• Conducts proactive Threat Hunting exercises based on relevant threat intelligence
• Works collaboratively with members from other Security Operations teams to drive Incident Response/Threat Hunting and overall program maturity
• Conducts legal holds/forensic analysis across multiple operating systems as required
• Serves as a Subject Matter Expert in Incident Response, guides technical and non-technical teams through the Incident Response lifecycle while driving containment, remediation, and lessons learned management.
• Serves as the technical lead during Incident Response engagements.
• Briefs Cybersecurity Leadership team throughout incidents.

Role Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science preferred
• 7+ years of technology, information security and/or application security experience
• Expert in top security flaws and resolutions as listed by OWASP, SANS etc.
• Strong experience with automation, automated runbooks, and ability to support the automation of high fidelity processes.
• Expert with SIEM, EDR, and other event correlation technologies.
• Experience with AI, generative and agentic, preferred
• Strong experience across multiple Operating Systems
• Knowledge of modern web and mobile applications frameworks and their security requirements
• Knowledge of network architecture, protocols, and standards
• Knowledge of Web Application Firewalls, SSL/TLS, Forward and reverse proxies
• Knowledge of security considerations around virtualization and cloud applications
• Experience with incident response, forensics and evidence preservation
• Ability to communicate technical security requirements to technical and non-technical personnel
• Ability to collaborate with technical and vendor personnel, cloud service providers
• Available off-hours/on-call to handle occasional incidents and escalations
• *Applicants must be currently authorized to work in the United States on a full-time basis. Western Union will not sponsor applicants for work visas for this position.

Workplace Option

HYBRID - Western Union values in-person collaboration, problem solving, and ideation whenever possible. We believe this fosters common ways of working and supports how we execute initiatives for our customers. The expectation is to work from the office a minimum of three days a week.

Location

11902 Burnet Rd., Suite 350, Austin, TX 78758

Benefits

You will also have access to short-term incentives, multiple health insurance options, accident and life insurance, and access to best-in-class development platforms, to name a few (https://careers.westernunion.com/global-benefits/). Please see the benefits below specific to your country. If applicable, additional role-specific benefits will be mentioned during your interview process or in an offer of employment.

Your United States Specific Benefits Include

• Medical, Dental, Vision, and Life Insurance
• Tuition Assistance Program
• Employee Discount Program
• Parental Leave
• 401K Plan

For residents of Colorado, California, Connecticut, Delaware, Minnesota, and Pennsylvania: Please do not respond to any questions on this initial application that may seek age-identifying information such as age, date of birth, or dates of school attendance or graduation. You may also redact this information from any materials you submit during the application process. You will not be penalized for redacting or removing this information.

Salary

The annual base salary range is $165,000 to $185,000 per year. Total on-target compensation includes a base salary and short-term and long-term incentives that align with individual and company performance. Actual salaries will vary based on candidates’ qualifications, skills, and competencies.

Other Details

We are passionate about honoring our employee's identity and fostering a feeling of belonging. Our commitment is to provide an inclusive culture that celebrates the unique backgrounds and perspectives of our global teams while reflecting on the communities we serve. We do not discriminate based on race, color, national origin, religion, political affiliation, sex (including pregnancy), sexual orientation, gender identity, age, disability, marital status, or veteran status. The company will provide accommodation to applicants, including those with disabilities, during the recruitment process, following applicable laws.

Estimated Job Posting End Date

12-07-2026

This application window is a good-faith estimate of the time that this posting will remain open. This posting will be promptly updated if the deadline is extended or the role is filled.