Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added just now
Information Systems Security Engineer – Product Security
Cubic Digital Intelligence Inc
Ashburn, VA
The Information Systems Security Engineer (ISSE), serving within the Product Security Team, supports the security of deployed products throughout their sustainment lifecycle.
Added 1 min ago
AI Platform Engineer
Polygon Labs
Remote, United States
- 5+ years as a software, platform, or infrastructure engineer, including experience prior to AI coding tools. Solid grasp of system design, data modeling, testing, debugging, and code…
Added 1 min ago
Senior Cloud / OSCAL Developer
Peraton
Washington, DC
…lead the development of the enterprise security compliance automation infrastructure for a Department of Justice customer. This role develops the cloud-based automation framework enabling…
Added 3 mins ago
Lead Information Security Engineer - Red Team
Lumen
Oklahoma City, OK
At Lumen, we are igniting business growth by connecting people, data, and applications quickly, securely, and effortlessly. As part of our security organization, you will help protect…
Added 3 mins ago
O
Federal Oracle Health Automation Engineer - Eggplant
Oracle
Oklahoma City, OK
- $23.8 to $56.83 USD / hour
The Federal Test Automation team is seeking a Staff Automation Engineer to support the Federal VA project. This role is responsible for designing, developing, and executing automated…
Added 3 mins ago
CrowdStrike Platform Senior Resident Consultant (Remote)
CrowdStrike
Oklahoma City, OK
Technologies: Experience with Host based firewall, File Integrity Management, Data Protection, Vulnerability Management, Attack Surface Management, IT Automation
Added 3 mins ago
Senior Front-End and Agentic-UI Engineer
Evolent
Oklahoma City, OK
The Senior Software Engineer leads the design, development, and deployment of complex features in the web user experience for the Evolent Platform. This role builds high-performance React…
Added 3 mins ago
Core Senior .NET Software Engineer
Evolent
Oklahoma City, OK
The Senior Software Engineer leads the design, development, and deployment of complex software solutions, ensuring scalability and maintainability. This role architects and implements…
Added 4 mins ago
EG
Automated Test Engineer
Eliassen Group
Oklahoma City, OK
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…
Added 7 mins ago
Senior Systems Engineer – Digital Engineering
RTX
United States
Qualifications You Must Have
Added 9 mins ago
O
Lead Principal Network Hardware Engineer
Oracle
Jefferson City, MO
- $146,300 to $306,400 USD / year
+ Sponsor automation, test frameworks, and lab infrastructure investments.
Added 9 mins ago
H
Manufacturing Engineer
HP
Corvallis
- $59,350 to $89,600 USD / year
The Line Steward (Industrial/Manufacturing Engineer) is part of the Fab Operations organization and is responsible for improving wafer fab production performance through data analysis,…
Added 11 mins ago
T
Senior Systems Engineer
TEKsystems
Scottsdale, AZ
- $50 to $70 USD / hour
DescriptionA Senior Systems Engineer Contact Center & Voice serves as the Collaboration Systems teams lead engineer and platform owner for the enterprise Amazon Connect (AWS Connect)…
Added 12 mins ago
Site Reliability Engineer
OFFICE OF MANAGEMENT AND ENTERPRISE SERV
United States
As a Site Reliability Engineer with OMES you will enjoy:
Added 12 mins ago
Staff Backend Platform Engineer
Zilker Partners
United States
Our Client runs a platform for enterprise AI agents with workflow management and auditing. The Staff Backend Platform Engineer focuses on the server-side foundation for observations,…
Added 12 mins ago
Applied AI Engineer
Zilker Partners
United States
…rigorous evals. Our Client builds applied AI for business process automation, mixing rules, classical ML, and LLMs to get reliable outcomes at sane cost and latency. Work covers workflow…
Added 12 mins ago
Senior Windows Platform Engineer
Zilker Partners
United States
…workflows on Windows endpoints and virtual desktops. This senior engineer takes charge of the Windows capture layer built on UI Automation, WinEvents, and input hooks, plus multi‑monitor…
Added 14 mins ago
UG
Senior AI/ML Engineer
UnitedHealth Group
Eden Prairie, MN
- $120,100 to $214,500 USD / year
As a Senior AI/ML Engineer within Optum Technology, you will design and deliver enterprise-scale AI solutions, platforms, and automations that transform healthcare delivery and operations.…
Added 15 mins ago
System Validation Engineering Manager
Quest Global
Sunnyvale, CA
…will strengthen validation coverage, improve laboratory and automation infrastructure, and ensure that critical findings reach the right…
Added 17 mins ago
Automation Commissioning Junior Engineer
HITACHI ENERGY USA INC
Raleigh, NC
…supporting the infrastructure that powers communities? As an Automation Commissioning Junior Engineer, you will support the testing, integration, and commissioning of substation automation…
Added 19 mins ago
Antenna Engineer
RADAR
San Diego, CA
You have knowledge of scripting or automation (e.g., Python, MATLAB) for simulation workflows and data post-processing.
Added 20 mins ago
ServiceNow Specialist
Huntington Ingalls Industries
Springfield, VA
…Technologies is leading the next evolution of national defense – the data evolution - by accelerating a breadth of national security solutions for government and commercial customers. Our…
Added 21 mins ago
Systems Development Engineer, Sovereign Cloud Operations, Google Public Sector
Google
Reston, VA
Must possess an active Top Secret/SCI security clearance with current polygraph
Added 21 mins ago
Secret – Test Automation Engineer
Insight Global
Reston, VA
We are seeking a Test Automation Engineer to support a mission-application modernization program that unifies access across a portfolio of production applications: one sign-on, one work…
Added 21 mins ago
Lead Information Security Engineer - Red Team
Lumen
Richmond, VA
At Lumen, we are igniting business growth by connecting people, data, and applications quickly, securely, and effortlessly. As part of our security organization, you will help protect…

Acrisure, LLC

Security Incident Response Engineer

ATLANTA, GA, United States

Apply on acrisure.wd1.myworkdayjobs.com About employer

Applications open in a new tab.

Job details

Experience: Minimum 3 years of progressive information security experience.
Posting language: English
Posted: Nov 12, 2026

Original job description

About Acrisure A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and more.

In the last twelve years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.

Job Summary:

The Security Incident Response Engineer is responsible for detecting, investigating, containing, eradicating, and recovering from cybersecurity incidents across Acrisure's global environment. This role serves as a key member of the Security Operations team and works closely with Infrastructure, Cloud, Identity, Workplace Technology, Legal, Privacy, Human Resources, and business stakeholders to rapidly respond to security threats and reduce organizational risk. The engineer leverages enterprise security technologies including EDR, SIEM, cloud security platforms, email security solutions, threat intelligence, and security automation tooling to identify and respond to attacks impacting endpoints, identities, cloud environments, applications, and data. This position combines hands-on incident response, threat hunting, detection tuning, forensic investigation, and continuous improvement activities.

Success in this role means rapidly detecting and containing threats before they become business-impacting events, continuously improving the organization's ability to respond to attacks, and driving measurable reductions in response times, incident severity, and operational risk.

Responsibilities:

Incident Response Operations

Investigate and respond to cybersecurity incidents involving endpoints, identities, cloud platforms, email systems, applications, data, and network infrastructure.
Perform incident triage, severity classification, impact analysis, containment, eradication, and recovery activities.
Execute cyber incident response procedures and escalation processes in accordance with the Cyber Incident Response Plan (CIRP).
Coordinate response efforts across Security, Infrastructure, Cloud, IAM, Workplace Technology, Legal, Privacy, Human Resources, and business teams.
Support major incident management activities and provide technical leadership during active security events.
Maintain detailed incident records, timelines, evidence, findings, and lessons learned.

Threat Detection and Investigation

Analyze alerts generated by EDR, SIEM, MDR, email security, cloud security, deception, and threat intelligence platforms.
Validate suspicious activity to distinguish true security incidents from false positives.
Perform root cause analysis to identify attack vectors, affected assets, compromised accounts, and attacker activities.
Conduct proactive threat hunting to identify indicators of compromise, adversary behaviors, and emerging threats.
Leverage MITRE ATT&CK techniques to improve detection and investigative effectiveness.

Digital Forensics and Evidence Collection

Collect, preserve, and analyze system, endpoint, cloud, email, and identity-related evidence.
Perform log analysis, forensic triage, malware investigation, and timeline reconstruction.
Support legal, regulatory, audit, and compliance investigations as required.
Maintain evidence handling and chain-of-custody procedures where applicable.

Security Engineering and Continuous Improvement

Develop and maintain incident response playbooks, investigation procedures, and operational runbooks.
Recommend detection improvements, new use cases, automations, and response capabilities.
Tune security alerts and detection logic to improve fidelity and reduce false positives.
Assist in the implementation and improvement of SOAR workflows and automated response capabilities.
Participate in tabletop exercises, incident simulations, and purple team activities.

Metrics and Reporting

Track and report operational metrics including:
Mean Time to Detect (MTTD)
Mean Time to Respond (MTTR)
Incident volume
Severity trends
Containment effectiveness
Detection fidelity
Produce incident reports, executive summaries, and post-incident reviews.
Identify recurring trends and recommend corrective actions.

Collaboration and Enablement

Partner with Security Engineering teams to improve telemetry, monitoring, and investigative capabilities.
Work with Vulnerability Management and Exposure Management teams on remediation activities resulting from incidents.
Provide guidance and mentorship to analysts and junior responders.
Participate in after-hours incident response and on-call rotations as required.

Education and Experience:

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related discipline (or equivalent experience).
Minimum 3 years of progressive information security experience.
Strong understanding of incident response methodologies, attack lifecycle, and containment strategies.
Experience with one or more EDR platforms such as Microsoft Defender for Endpoint, SentinelOne, CrowdStrike, or equivalent.
Experience with SIEM technologies such as Microsoft Sentinel, Google SecOps, Splunk, QRadar, or similar platforms.
Knowledge of Microsoft 365, Entra ID, Active Directory, and cloud security concepts.
Understanding of MITRE ATT&CK, threat intelligence, and threat hunting methodologies.
Familiarity with Windows, Linux, and macOS operating systems.
Ability to analyze logs, indicators of compromise (IOCs), and attacker techniques.
Experience with PowerShell, Python, KQL, or other scripting/query languages.

Welcome, your new opportunity awaits you.

Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.

Why Join Us:

At Acrisure, we’re building more than a business, we’re building a community where people can grow, thrive, and make an impact. Our benefits are designed to support every dimension of your life, from your health and finances to your family and future.

Making a lasting impact on the communities it serves, Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Children's Hospital in Grand Rapids, Michigan, UPMC Children's Hospital in Pittsburgh, Pennsylvania and Blythedale Children's Hospital in Valhalla, New York.

Employee Benefits

We also offer our employees a comprehensive suite of benefits and perks, including:

Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.
Mental Wellness: Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.
Financial Wellness: Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.
Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.
… and so much more!

This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.

Acrisure is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting leaves@acrisure.com.

Final candidates will be required to complete post-offer verification processes related to the role and in accordance with applicable laws.

California Residents: Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy.

Recruitment Fraud: Please visit here to learn more about our Recruitment Fraud Notice.

Welcome, your new opportunity awaits you.

Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.

Why Join Us:

Employee Benefits We also offer our employees a comprehensive suite of benefits and perks, including:

Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.
Mental Wellness: Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.
Financial Wellness: Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.
Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.
… and so much more!

This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.

Final candidates will be required to complete post-offer verification processes related to the role and in accordance with applicable laws.

California Residents: Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy.

Recruitment Fraud: Please visit here to learn more about our Recruitment Fraud Notice.

Welcome, your new opportunity awaits you.

Apply on acrisure.wd1.myworkdayjobs.com About employer

More about this job

Skills

Incident response
Cybersecurity
Forensic intelligence
Process improvement
Leadership
Root cause analysis
MITRE ATT&CK
Regulatory compliance
Reporting
Collaboration
Computer science
Splunk
Microsoft 365
Microsoft Active Directory
Microsoft Windows
Linux
Apple macOS
Microsoft PowerShell
Python
Query languages
Team leadership

Report this job

Work requirements

Jobs in the United States