Incident Response Specialist

Location: New York

Primary Details Time Type:
Full time Worker Type:
Employee

Title:

Incident Response Specialist The Opportunity The purpose of this role is to lead and coordinate the organization's response to cybersecurity incidents through proactive and reactive security operations. This role conducts advanced analysis of cyber threats, investigates security events, performs threat hunting and forensic analysis, and provides effective technical responses to cybersecurity incidents to protect the organization against evolving threats. The position also serves as a trusted advisor on incident response capabilities, cybersecurity risk management, and continuous improvement initiatives that strengthen organizational resilience

Location:

Madison, WI United states

Work Arrangement:
This role is hybrid, requiring 3 days/week in our Madison, WI office

The salary range for this role is between $93,000-$135,000

Your New Role Lead and coordinate the response to cybersecurity incidents including detection, analysis, containment, eradication, recovery, and post-incident activities.

Conduct detailed investigations of security events and incidents to determine root cause, scope, impact, and remediation requirements.

Monitor, analyze, and triage security alerts from multiple security platforms to identify malicious activity and escalate incidents appropriately.

Communicate incident status, risks, and remediation recommendations effectively to both technical and non-technical stakeholders, including leadership teams.

Perform threat hunting and forensic analysis activities to identify adversary tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), and potential security gaps.

Develop, maintain, and execute incident response playbooks, procedures, and runbooks aligned with industry frameworks and best practices.

Coordinate cross-functional response activities with internal teams, third-party vendors, managed service providers, and business stakeholders during cybersecurity incidents.

Leverage threat intelligence sources and partner intelligence feeds to enrich investigations, identify emerging threats, and improve detection and response capabilities.

Collect, analyze, and document incident data, trends, and metrics to support continuous improvement of security controls, processes, and detection capabilities.

Assist in the development, testing, and maintenance of the Cybersecurity Incident Management Plan and cyber crisis response capabilities.

Support the implementation of defense-in-depth strategies and security controls to reduce organizational risk and improve detection and response effectiveness.

Identify and assess cybersecurity risks within assigned areas of responsibility, act as a subject matter expert, and provide risk-based recommendations to support informed decision-making.

Required Qualifications Tertiary Degree or equivalent combination of education and work experience.

Preferred Qualifications Relevant cybersecurity certifications such as GCIH, GCFA, GCFE, CISSP, CySA+, Security+, or equivalent.

Required Work Experience Experience in cybersecurity, incident response, security operations, digital forensics, threat hunting, or a related information security discipline.

Experience investigating and responding to cybersecurity incidents across enterprise environments.

Experience working within Security Operations Center (SOC) environments and incident response processes.

Experience using SIEM, EDR/XDR, forensic, and threat intelligence platforms to investigate and respond to security incidents.

Experience conducting root cause analysis, digital forensic investigations, malware analysis, or threat hunting activities.

Familiarity with security monitoring, alert triage, incident analysis, and incident documentation processes.

Preferred Work Experience Advanced understanding of cyber adversary tactics, techniques, and procedures used by modern threat actors.

Demonstrated knowledge of cybersecurity frameworks and methodologies such as NIST Cybersecurity Framework, NIST 800-61, MITRE ATT&CK, ISO 27001, or similar standards.

Experience supporting cyber crisis management, incident response program development, or cybersecurity governance initiatives.

QBE, a global insurance leader, is the proud parent company of NAU Country Insurance Company. NAU Country writes in 48 states and has nine locations nationwide. Together, we combine the history, expertise, innovation, and a shared commitment to excellence to provide unparalleled insurance solutions to our…