Senior Incident Response Engineer

Western Union; Austin (TX); Hybrid; USD 165,000 - 185,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Tuition Assistance Program

Employee Discount Program

Parental Leave

401K Plan

Job summary

Western Union is seeking a senior cybersecurity professional to lead incident response and threat hunting efforts from its Austin office. The role focuses on containment, remediation, and lessons learned, coordinating with Cyber Fusion Center analysts and cross-functional teams.

Ideal candidates have 7+ years of security experience, strong knowledge of OWASP/SANS flaws, and hands-on expertise with SIEM/EDR, forensics, and cloud security. Hybrid work requires office presence several days weekly.

Qualifications

• Bachelor's degree preferred in IT, cybersecurity or CS.
• 7+ years in technology, information security and/or application security.
• Expert in top security flaws and resolutions (OWASP/SANS).
• Automation and runbooks experience; automate high-fidelity processes.
• SIEM/EDR and event correlation technologies expertise.
• Experience across multiple operating systems; web/mobile frameworks security.
• Knowledge of WAFs, SSL/TLS, proxies, virtualization and cloud security.
• Incident response, forensics and evidence preservation experience.
• Ability to communicate security requirements to technical/non-technical staff.
• Ability to collaborate with technical and vendor personnel; on-call availability.

Responsibilities

• Perform intrusion scope and root cause analysis.
• Assist containment and remediation actions.
• Serve as escalation point for Cyber Fusion Center analysts.
• Support Purple Team engagements as SME.
• Conduct proactive Threat Hunting using threat intel.
• Collaborate with Security Operations teams to mature IR/TH program.
• Conduct forensics across OS as required.
• Lead IR engagements and guide teams through lifecycle.

Skills

Security incident response

Automation

SIEM/EDR

Threat hunting

Web/mobile security

Network security

Web application security

Virtualization/cloud security

Forensics

Communication skills

Vendor collaboration

On-call readiness

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science

Tools

SIEM/EDR

Job description

Role Responsibilities

• Performs intrusion scope and root cause analysis
• Assists in containment and remediation actions
• Serves as an escalation point for Cyber Fusion Center analysts
• Supports Purple Team engagements as a subject matter expert
• Conducts proactive Threat Hunting exercises based on relevant threat intelligence
• Works collaboratively with members from other Security Operations teams to drive Incident Response/Threat Hunting and overall program maturity
• Conducts legal holds/forensic analysis across multiple operating systems as required
• Serves as a Subject Matter Expert in Incident Response, guides technical and non-technical teams through the Incident Response lifecycle while driving containment, remediation, and lessons learned management.
• Serves as the technical lead during Incident Response engagements.
• Briefs Cybersecurity Leadership team throughout incidents.

Role Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science preferred
• 7+ years of technology, information security and/or application security experience
• Expert in top security flaws and resolutions as listed by OWASP, SANS etc.
• Strong experience with automation, automated runbooks, and ability to support the automation of high fidelity processes.
• Expert with SIEM, EDR, and other event correlation technologies.
• Experience with AI, generative and agentic, preferred
• Strong experience across multiple Operating Systems
• Knowledge of modern web and mobile applications frameworks and their security requirements
• Knowledge of network architecture, protocols, and standards
• Knowledge of Web Application Firewalls, SSL/TLS, Forward and reverse proxies
• Knowledge of security considerations around virtualization and cloud applications
• Experience with incident response, forensics and evidence preservation
• Ability to communicate technical security requirements to technical and non-technical personnel
• Ability to collaborate with technical and vendor personnel, cloud service providers
• Available off-hours/on-call to handle occasional incidents and escalations
• *Applicants must be currently authorized to work in the United States on a full-time basis. Western Union will not sponsor applicants for work visas for this position.

Workplace Option

HYBRID - Western Union values in-person collaboration, problem solving, and ideation whenever possible. We believe this fosters common ways of working and supports how we execute initiatives for our customers. The expectation is to work from the office a minimum of three days a week.

Location

11902 Burnet Rd., Suite 350, Austin, TX 78758

BENEFITS AND OTHER DETAILS

Benefits

You will also have access to short-term incentives, multiple health insurance options, accident and lifeinsurance, and access to best-in-class development platforms, to name a few(https://careers.westernunion.com/global-benefits/). Please see the benefits below specific to your country. If applicable, additional role-specific benefits will be mentioned during your interview process or in an offer of employment.

Your United States specific benefits include:

• Medical, Dental, Vision, and Life Insurance
• Tuition Assistance Program
• Employee Discount Program
• Parental Leave
• 401KPlan

For residents of Colorado, California, Connecticut, Delaware, Minnesota, and Pennsylvania: Please do not respond to any questions on this initial application that may seek age-identifying information such as age, date of birth, or dates of school attendance or graduation. You may also redact this information from any materials you submit during the application process. You will not be penalized for redacting or removing this information.

Salary

The annual base salary range is $165,000 to $185,000 per year. Total on-target compensation includes a base salary and short-term and long-term incentives that align with individual and company performance. Actual salaries will vary based on candidates' qualifications, skills, and competencies.

Other Details

We are passionate about honoring our employee's identity and fostering a feeling of belonging. Our commitment is to provide an inclusive culture that celebrates the unique backgrounds and perspectives of our global teams while reflecting on the communities we serve. We do not discriminate based on race, color, national origin, religion, political affiliation, sex (including pregnancy), sexual orientation, gender identity, age, disability, marital status, or veteran status. The company will provide accommodation to applicants, including those with disabilities, during the recruitment process, following applicable laws.

Estimated Job Posting End Date:

10-26-2026

This application window is a good-faith estimate of the time that this posting will remain open. This posting will be promptly updated if the deadline is extended or the role is filled.