{"id":2113722,"url":"https://alion.io/job/watts-water-technologies-senior-incident-response-engineer","title":"Senior Incident Response Engineer","company":{"id":1782835,"name":"Watts Water Technologies","domain":"watts.com","url":"https://alion.io/company/watts-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":16,"ghost_share":0,"stale_share":0.688,"repost_share":0,"time_to_fill_p50_days":62,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["North Andover, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":152000,"max":168000,"currency":"USD","period":"year","gross":null,"usd_annual":168000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"GCP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-08T23:09:39Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-23T05:19:31Z","board_verified":false,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"We’re Watts. Together, we’re reimagining the future of water.\nWe feel proud every day about what we do. We're all part of the same crucial mission, no matter what function we support -- it's to provide safe, clean water for the world, and to protect our planet's most valuable resource.\nWhat we do:\nFor 150 years, Watts has built best-in-class products that are trusted by customers in residential and commercial settings across the world. We are at the forefront of innovation, working with cutting-edge technology to provide smart and connected, sustainable water solutions for the future. Watts is a leading brand with a quality reputation - and we have a dynamic future ahead.\nScope of Position\nThis highly skilled individual, as part of the Information Security team, will serve as a senior technical escalation point for the global Information Security program. This is a hands-on senior individual contributor role responsible for leading complex security investigations, advancing detection engineering capabilities, and providing deep technical expertise across incident response activities.\nThe Senior Incident Response Engineer will own complex investigations from initial escalation through containment, remediation, and closure; investigate security incidents across cloud and enterprise environments; and drive improvements in detection, response, and investigation capabilities. This role will also serve as a technical authority and escalation resource for other members of the Information Security team.\nThis position reports to the Senior Manager, Information Security. This role is hybrid and is based in North Andover, Massachusetts.\nPrimary Job Duties and Responsibilities\nServe as the senior technical escalation point for Level 2 and Level 3 security incidents, owning complex investigations end to end through scoping, containment, remediation, and closure.\nInvestigate cloud application compromise and exploitation across AWS, Azure, and GCP, including identity compromise, misconfiguration exploitation, privilege escalation, and data exposure across production and newly acquired environments.\nOwn detection engineering and tuning within CrowdStrike Falcon, including reviewing alert quality and volume, adjusting detections, reducing false positives, and validating the impact of changes before and after implementation.\nServe as the primary technical liaison to CrowdStrike Falcon Complete and NG SIEM MDR, managing partner escalations, responding to requests for information, validating partner findings against internal telemetry, and driving service quality.\nConduct host, network, identity, email, and cloud forensics to establish root cause, incident scope, persistence, lateral movement, and potential data exposure.\nBuild and maintain detection content, queries, and automation to improve investigation speed, strengthen security monitoring, and reduce manual triage effort.\nProvide senior technical guidance and escalation support to the Incident Response Associate when investigations require deeper technical expertise.\nDevelop and maintain incident response playbooks, runbooks, and standard operating procedures for incident types within the scope of the role.\nIdentify opportunities to continuously improve incident detection and response capabilities, investigation processes, and security operations in alignment with Watts' commitment to continuous improvement.\nAssume responsibility for other projects and duties as assigned by the Senior Manager, Information Security or Company management.\nTravel Requirements: 10%\nRequired Qualifications\nBachelor's degree in cybersecurity, information technology, computer science, or a related field and a minimum of five years of hands-on incident response, security operations, or related cybersecurity experience. In the absence of a degree, relevant work experience may be considered.\nDemonstrated experience investigating cloud compromise and application exploitation within AWS, Azure, and/or GCP environments.\nHands-on experience with endpoint detection and response (EDR) technologies, including detection engineering, alert tuning, and investigation.\nExperience conducting host, network, identity, email, and/or cloud-based forensic investigations.\nExperience serving as a technical point of contact or escalation resource for an MDR or managed security service provider.\nWorking knowledge of MITRE ATT&CK, the Cyber Kill Chain, and identity-based attack techniques within Entra ID and Active Directory environments.\nAbility to analyze complex security incidents, synthesize information from multiple telemetry sources, and independently drive investigations through resolution.\nUnderstanding of and adherence to applicable laws, codes, policies, regulations, and security practices and procedures.\nMust successfully establish employment eligibility and satisfactorily complete required background checks and pre-employment testing as a condition of employment.\nPreferred Qualifications\nHands-on experience with CrowdStrike Falcon, including detection engineering and tuning.\nExperience working with CrowdStrike Falcon Complete and/or NG SIEM MDR.\nGCIH, GCFA, GCIA, GCFE, or equivalent incident response or digital forensics certification.\nExperience supporting security operations within a global or multi-site enterprise environment.\nExperience investigating incidents within newly acquired or integrating business environments.\nGeneral Applicable Company Competencies\nCommitment to Watts' values of integrity, accountability, continuous improvement and innovation, and transparency.\nPunctuality and dependability.\nAbility to be flexible and adapt to changing work priorities and stressful conditions.\nAdherence to all personnel policies, procedures, and standards of process as implemented by Watts.\nMaintain productive and collaborative relationships with other Watts employees.\nAdherence to Watts' seven cultural beliefs: Growth Mindset, Customer-Focused Innovation, Constant Communication, Clear Goals, Collaborate Globally, Be Inclusive, and Take Action.\nWorking Conditions\nWhile performing the job duties, you will be working in an office environment. You will be required to work in the office at the North Andover, Massachusetts location three days per week (Monday-Wednesday) and can work remotely two days per week (Thursday and Friday).\nPhysical Requirements\nSpecific physical abilities required for this position include, but are not limited to:\nAbility to remain seated at a desk or workstation for extended periods.\nAbility to perform repetitive tasks such as typing on a keyboard or using a mouse for extended periods.\nAbility to physically move around the office and organize or transport files, packages, or other office-related materials.\nAbility to read documents, use a computer, and perform data entry tasks.\nAbility to communicate clearly with management and coworkers, particularly in meetings or phone calls.\nAbility to operate standard office equipment such as computers, printers, phones, and copiers.\nAbility to occasionally lift and carry light objects, such as office supplies, documents, or small equipment.\nPay Range\nThe expected salary range for this position is $152,000-$168,000 yearly. Actual compensation will be dependent upon individual skills, experience, qualifications, and applicable law.\nNothing in this job description restricts Watts’ right to assign or reassign duties, responsibilities, and working hours/conditions to this position at any time. This position is “at will,” which means that either the employee or Watts may terminate the employment relationship at any time, with or without notice, and for any lawful reason.\nWatts in it for you:\nPlease note that the followingbenefits apply only to permanent roles and do not apply to internship roles.\nCompetitive compensation based on your skills, qualifications and experience\nComprehensive medical and dental coverage, retirement benefits\nFamily building benefits, including paid maternity/paternity leave\n10 paid holidays and Paid Time Off\nContinued professional development opportunities and educational reimbursement\nAdditional perks such as fitness reimbursements and employee discount programs\nLearn more about our benefit offerings here: https://tapintowattsbenefits.com/\nHow we work:\nAt Watts, our culture is team-oriented and supportive. Employees here genuinely care about the quality of their work, and about each other. Our people are the heart of who we are and contribute to our longevity and continued success.\nAnd this is a place where you can have a big career. No matter your role, there are opportunities for learning and development, and your daily contributions make a meaningful impact on the lives of people who use our products and on the future of water.\nWatts is committed to equal employment opportunity. We follow a policy of administering all employment decisions and personnel actions without regard to race, color, religion, creed, sex, pregnancy, national origin, sexual orientation, age, physical or mental disability, genetic disposition or carrier status, marital status, military or veteran status, minorities, or any other category protected under applicable federal, state, or local law. Consistent with the obligations of state and federal law, Watts will make reasonable accommodations for qualified individuals with disabilities. Any employee who needs a reasonable accommodation should contact Human Resources.","description_format":"text","description_chars":9448,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Industrial Machinery","HVAC & Refrigeration","Kitchens, Bathrooms & Home Improvement"],"lifecycle":[{"event":"open","at":"2026-10-08T23:09:39Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":0.9,"p_active":0.632,"p_room":1,"age_days":16,"expected_fill_days":62,"reasons":["conf:48","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":168000,"is_top_pay":true},"html_url":"https://alion.io/job/watts-water-technologies-senior-incident-response-engineer","json_url":"https://alion.io/job/watts-water-technologies-senior-incident-response-engineer.json","meta":{"generated_at":"2026-10-25T21:58:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31057,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1782835},"rest":"https://alion.io/mcp/rest/get_company?id=1782835"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwatts-water-technologies-senior-incident-response-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwatts-water-technologies-senior-incident-response-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwatts-water-technologies-senior-incident-response-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/watts-water-technologies-senior-incident-response-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwatts-water-technologies-senior-incident-response-engineer"}]}