Cybersecurity Engineer

Kestra • Austin, TX

8d

About The Position

Kestra Holdings is seeking a Cybersecurity Incident Response Engineer to help defend the organization against evolving cyber threats. The role focuses on identifying, analyzing, and responding to security incidents across a diverse enterprise environment. The ideal candidate has experience with modern security information and event management (SIEM) platforms, endpoint detection and response (EDR) tools, and threat intelligence frameworks.

The engineer investigates and responds to incidents, conducts threat hunting and digital forensics, and works with SOC analysts, IT, and other stakeholders to contain and remediate threats. The role also supports audits, maintains incident response playbooks and procedures, contributes to security policies and operational practices, and participates in exercises to improve detection and response capabilities.

Requirements

• At least 2 years of proven experience in a similar role.
• Bachelor's degree in Cybersecurity, IT, or equivalent experience.
• Security+ or equivalent certification.
• Strong understanding of the MITRE ATT&CK framework and Cyber Kill Chain.

Nice To Haves

• Microsoft security certifications.
• Proficiency or hands-on experience with Microsoft security tooling.

Responsibilities

• Manage alerts escalated by the SOC and challenge the SOC on potentially overlooked incidents.
• Investigate and respond to security incidents using IDS suite tools.
• Perform root cause analysis and develop mitigation strategies.
• Perform audits.
• Collaborate with SOC analysts, IT, and other stakeholders to contain and remediate threats.
• Stay up to date with security trends, vulnerabilities, best practices, and security technologies.
• Develop and maintain incident response playbooks and procedures.
• Conduct threat hunting activities using KQL and Sentinel workbooks.
• Conduct digital forensics investigations to identify indicators of compromise, determine attack vectors, and preserve evidence in accordance with legal and organizational standards.
• Support internal and external audit activities by providing incident response documentation and evidence.
• Contribute to the development and refinement of security policies, procedures, and operational practices.
• Participate in red team and adversary simulation exercises to improve detection and response capabilities.

Benefits

• Competitive pay and benefits package.
• 401(k).
• Health insurance.
• Supportive, collaborative environment committed to professional excellence.
• Training, development, and long-term growth opportunities within the firm.
• Tuition reimbursement for qualified expenses.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level