Cybersecurity Engineer

Kestra Holdings•Austin, TX

About The Position

We are seeking a Cybersecurity Incident Response Engineer to help defend the organization against evolving cyber threats. The role identifies, analyzes, and responds to security incidents across a diverse enterprise environment. It involves using security information and event management (SIEM) platforms, endpoint detection and response (EDR) tools, threat intelligence frameworks, IDS suite tools, KQL, and Sentinel workbooks. The engineer also supports forensic investigations, audits, incident response readiness, and improvements to security policies and operational practices.

Requirements

At least 2 years of proven experience in a similar role.
Bachelor's degree in Cybersecurity or IT, or equivalent experience.
Security+ certification or equivalent.
Strong understanding of the MITRE ATT&CK framework and Cyber Kill Chain.

Nice To Haves

Microsoft security certifications.
Hands-on experience with Microsoft security tooling.

Responsibilities

Manage alerts escalated by the SOC and challenge the SOC on potentially overlooked incidents.
Investigate and respond to security incidents using IDS suite tools.
Perform root cause analysis and develop mitigation strategies.
Perform audits.
Collaborate with SOC analysts, IT, and other stakeholders to contain and remediate threats.
Stay up to date with security trends, vulnerabilities, best practices, emerging threats, and security technologies.
Develop and maintain incident response playbooks and procedures.
Conduct threat hunting activities using KQL and Sentinel workbooks.
Conduct digital forensics investigations to identify indicators of compromise, determine attack vectors, and preserve evidence in accordance with legal and organizational standards.
Support internal and external audit activities by providing incident response documentation and evidence.
Contribute to the development and refinement of security policies, procedures, and operational practices.
Participate in red team and adversary simulation exercises to improve detection and response capabilities.