Information Security Engineer - Principal

Established in 2021,
Independence Pet Holdings is a corporate holding company that manages a diverse and broad portfolio of modern pet health brands and services, including insurance, pet education, lost recovery services, and more throughout North America.

We believe pet insurance is more than a financial product and build solutions to simplify the pet parenting journey and help improve the well-being of pets. As a leading authority in the pet category, we operate with a full stack of resources, capital, and services to support pet parents. Our multi-brand and omni-channel approach include our own insurance carrier, insurance brands and partner brands.

We are seeking an experienced Principal Security Operations Lead to join the North America Information Security team, reporting directly to the Director of Security Operations. This is a hands‑on technical role focused on incident response, threat intelligence, and forensic investigations across cloud and legacy environments.

The successful candidate will help support a unified enterprise security operations model, including the continued implementation of SIEM and detection tools across environments, advanced threat intelligence, and automated response processes. The role requires strong Microsoft Azure and Microsoft 365 security experience, multi‑layer investigations, phishing response, clear communication, and the ability to work across Security Engineering, Security Operations, GRC, Infrastructure, Cloud, Dev Ops, application, and business teams.

This role is expected to act as the key contact for technical investigations, drive remediation, produce clear documentation and evidence, and provide quality review and escalation support for repeatable work performed by offshore or managed‑service partners.

• Lead the collection, analysis, and operationalization of cyber threat intelligence from internal telemetry, commercial intelligence providers, open-source intelligence (OSINT), and industry sharing groups.
• Analyze adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK and translate intelligence into actionable detections, monitoring requirements, investigations, and security control improvements.
• Develop intelligence reports, threat briefs, and executive summaries that communicate emerging threats, risk trends, adversary activity, and potential business impacts.
• Track industry-specific threats affecting insurance, financial services, healthcare, cloud platforms, and software supply chains.
• Partner with Security Engineering and Security Architecture teams to incorporate threat intelligence into detection logic, control design, policy updates, and incident response processes.

• Lead advanced investigations involving suspicious activity, account compromise, insider threats, ransomware, malware infections, cloud attacks, phishing campaigns, business email compromise, data exfiltration, and unauthorized access attempts.
• Perform deep analysis of security alerts generated by SIEM, XDR, EDR, email security, identity platforms, cloud security solutions, and network security tools.
• Correlate logs, events, endpoint telemetry, cloud activity, authentication records, and threat intelligence to determine attack scope, impact, and root cause.
• Serve as an escalation point for complex investigations requiring advanced analytical skills, cross platform analysis, or forensic validation.

• Conduct forensic investigations involving endpoints, servers, Microsoft 365, Azure, identity platforms, email systems, cloud workloads, and hybrid environments.
• Acquire, preserve,…