Cybersecurity Incident Response Engineer

Kestra Financial is hiring an on-site Cybersecurity Incident Response Engineer in Austin, TX to strengthen security operations across a diverse enterprise environment. In this role, you will help ensure incidents are identified quickly, investigated thoroughly, and resolved with repeatable procedures that improve detection and response over time.

Responsibilities

• Manage alerts escalated by the SOC.
• Review and challenge SOC findings when incidents may have been overlooked.
• Investigate and respond to security incidents using IDS suite tools.
• Conduct root cause analysis and develop mitigation strategies.
• Perform audits.
• Collaborate with SOC analysts, IT, and other stakeholders to contain and remediate threats.
• Develop and maintain incident response playbooks and procedures.
• Perform threat hunting using KQL and Sentinel workbooks.
• Conduct digital forensics investigations to identify indicators of compromise (IOCs), determine attack vectors, and preserve evidence according to legal and organizational standards.
• Support internal and external audit activities by providing incident response documentation and evidence.
• Contribute to the development and refinement of security policies, procedures, and operational practices.
• Participate in red team and adversary simulation exercises to strengthen detection and response capabilities.
• Continuous learning: stay current with security trends, vulnerabilities, and best practices, as well as emerging threats, vulnerabilities, and security technologies.

Requirements

• 2+ years of proven experience in a similar role.
• Bachelor’s degree in Cybersecurity or IT (or equivalent experience).
• Security+ or equivalent certification (Microsoft security certifications are a plus).
• Strong understanding of the Mitre Attack / Cyber Kill-Chain.
• Proficiency and hands-on experience with Microsoft security tooling is a plus.

Technologies

• SIEM, EDR, IDS suite tools
• KQL, Sentinel workbooks
• Microsoft security tooling
• Mitre Attack / Cyber Kill-Chain

Benefits

• Competitive pay and benefits with a large employer (over 1600 employees nationwide).
• 401(k), health insurance, and a competitive benefits package.
• Supportive, collaborative environment committed to professional excellence.
• Training, development, and long-term growth opportunities within the firm.
• Tuition reimbursement for qualified expenses.
• Help clients navigate meaningful financial decisions with confidence.

Internal Application Policy

• Internal applicants must be in good standing and have a minimum of 1 year of service with Kestra.
• Internal applicants must also have a minimum of 1 year of service in the current role unless approved by EVP.