Senior Incident Response Lead — Hybrid

Western Union; Austin (TX); Hybrid; USD 165,000 - 185,000; Full time

Benefits offered by this job

Health Insurance

Tuition Assistance

Employee Discount

Parental Leave

401K Plan

Job summary

Western Union is seeking an experienced cybersecurity professional to lead incident response and threat hunting initiatives from a hybrid Austin office. The role demands strong expertise in SIEM/EDR, forensics, and cross-OS security, with a focus on containment, remediation, and lessons learned.

The candidate will coordinate with Cyber Fusion Center analysts and vendor partners, participate in Purple Team activities, and remain available for on-call incidents.

Qualifications

• Bachelor’s degree preferred in IT/Cybersecurity/CS.
• 7+ years of technology, info security, and/or app security experience.
• Expertise in top security flaws and resolutions (OWASP/SANS).
• Strong automation experience with runbooks and process automation.
• Expert with SIEM, EDR, and event correlation technologies.
• Experience with AI, generative and agentic, preferred.
• Strong cross-OS experience and security requirements knowledge.
• Knowledge of web/mobile frameworks, networks, and security controls.
• Experience with incident response, forensics, and evidence preservation.
• Ability to convey security concepts to both technical and non-technical audiences.

Responsibilities

• Performs intrusion scope and root cause analysis.
• Assists in containment and remediation actions.
• Serves as an escalation point for Cyber Fusion Center analysts.
• Supports Purple Team engagements as a subject matter expert.
• Conducts proactive Threat Hunting exercises based on threat intel.
• Collaborates with Security Operations teams to advance IR/Threat Hunting maturity.
• Conducts forensics and evidence preservation across OSes.
• Acts as a Subject Matter Expert in Incident Response lifecycle and drives containment.
• Leads during Incident Response engagements.
• Briefs Cybersecurity Leadership on incidents.

Skills

Threat Hunting

Incident Response

Automation

Cloud Security

OWASP/SANS knowledge

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

SIEM

EDR

Web Application Firewall

Cloud Security Tools

Job description

Western Union is seeking an experienced cybersecurity professional to lead incident response and threat hunting initiatives from a hybrid Austin office. The role demands strong expertise in SIEM/EDR, forensics, and cross-OS security, with a focus on containment, remediation, and lessons learned.

The candidate will coordinate with Cyber Fusion Center analysts and vendor partners, participate in Purple Team activities, and remain available for on-call incidents.