Cybersecurity Engineer
Confirmed on the employer's own hiring board on Nov 9, 2026. First seen by Alion on Oct 19, 2026. Kestra Holdings scores A on the Alion truth index.
Lead with Purpose. Partner with Impact.
We are seeking a Cybersecurity Incident Response Engineer to join our team and help defend our organization against evolving cyber threats. This role focuses on identifying, analyzing, and responding to security incidents across a diverse enterprise environment. The ideal candidate will have experience working with modern security information and event management (SIEM) platforms, endpoint detection and response (EDR) tools, and threat intelligence frameworks.
What you’ll Do:
Manage alerts escalated by the SOC.
Challenge the SOC on potentially overlooked incidents.
Investigate and respond to security incidents using IDS suite tools.
Perform root cause analysis and develop mitigation strategies.
Perform audits.
Collaborate with SOC analysts, IT, and other stakeholders to contain and remediate threats.
Continuous Learning: Stay up to date with security trends, vulnerabilities, and best practices.
Develop and maintain incident response playbooks and procedures.
Conduct threat hunting activities using KQL and Sentinel workbooks.
Stay current with emerging threats, vulnerabilities, and security technologies.
Conduct digital forensics investigations to identify indicators of compromise (IOCs), determine attack vectors, and preserve evidence in accordance with legal and organizational standards.
Support internal and external audit activities by providing incident response documentation and evidence.
Contributes to the development and refinement of security policies, procedures, and operational practices.
Participate in red team and adversary simulation exercises to improve detection and response capabilities.
What You Bring:
2+ years of proven experience in a similar role.
Bachelor's degree in Cybersecurity, IT or equivalent experience.
Security+ or equivalent certification (Microsoft security certifications are a plus)
A strong understanding of the Mitre Attack/Cyber Kill-Chain.
Proficiency/hands-on experience in Microsoft security tooling is a plus.