Senior Incident Response Engineer

Western Union•Austin, TX

1d•$165,000 - $185,000•Hybrid

About The Position

The Senior Incident Response Engineer serves as a technical lead and subject matter expert for incident response, guiding technical and non-technical teams through the incident response lifecycle. The role conducts intrusion scoping, root cause analysis, threat hunting, and forensic analysis, and supports containment, remediation, evidence preservation, and lessons learned. It also serves as an escalation point for Cyber Fusion Center analysts, supports Purple Team engagements, and briefs cybersecurity leadership during incidents. The position is hybrid, with an expectation to work from the Austin office at least three days per week, and requires availability off-hours/on-call for occasional incidents and escalations. Applicants must be authorized to work in the United States on a full-time basis; Western Union will not sponsor work visas. The annual base salary range is $165,000–$185,000, with total on-target compensation also including short-term and long-term incentives tied to individual and company performance.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, or Computer Science preferred.
7+ years of technology, information security, and/or application security experience.
Expertise in top security flaws and resolutions, such as those listed by OWASP and SANS.
Strong experience with automation and automated runbooks, and ability to support automation of high-fidelity processes.
Expertise with SIEM, EDR, and other event correlation technologies.
Strong experience across multiple operating systems.
Knowledge of modern web and mobile application frameworks and their security requirements.
Knowledge of network architecture, protocols, and standards.
Knowledge of Web Application Firewalls, SSL/TLS, and forward and reverse proxies.
Knowledge of security considerations related to virtualization and cloud applications.
Experience with incident response, forensics, and evidence preservation.
Ability to communicate technical security requirements to technical and non-technical personnel.
Ability to collaborate with technical and vendor personnel and cloud service providers.
Availability off-hours/on-call to handle occasional incidents and escalations.
Must be currently authorized to work in the United States on a full-time basis; work visa sponsorship is not available.

Nice To Haves

Experience with AI, including generative and agentic AI.

Responsibilities

Perform intrusion scoping and root cause analysis.
Assist with containment and remediation actions.
Serve as an escalation point for Cyber Fusion Center analysts.
Support Purple Team engagements as a subject matter expert.
Conduct proactive threat hunting based on relevant threat intelligence.
Collaborate with other Security Operations teams to advance incident response, threat hunting, and overall program maturity.
Conduct legal holds and forensic analysis across multiple operating systems as required.
Guide technical and non-technical teams through the incident response lifecycle, including containment, remediation, and lessons learned management.
Serve as the technical lead during incident response engagements.
Brief the Cybersecurity Leadership team throughout incidents.