Principal Information Security Engineer

Independence Pet Group

. Lead collection, analysis, and operationalization of cyber threat intelligence from internal telemetry, commercial providers, OSINT, and industry sharing groups.

Posted 11/11/2026full-timeUnited StatesLead💰 $187,899 - $234,873 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Threat Intelligence, Incident Response, and Digital Forensics, with a strong focus on advanced detection methodologies and proactive threat hunting across various platforms. Proven ability to lead investigations, develop intelligence reports, and optimize security operations while mentoring junior analysts.

Highest-signal resume keywords

Cyber Threat IntelligenceIncident ResponseDigital ForensicsThreat HuntingMITRE ATT&CK

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Forensic Evidence AcquisitionMalware TriageLog AnalysisDetection Logic DevelopmentCorrelation RulesMemory AnalysisArtifact CollectionTimeline ReconstructionRoot-Cause DeterminationSIEM Analytics

Soft Skills

Excellent Written CommunicationExcellent Verbal CommunicationAttention to DetailInvestigative MindsetMentoring

Tools & Technologies

Microsoft SentinelMicrosoft Defender XDRDefender for EndpointCrowdStrikeAzureMicrosoft 365Entra IDSIEMXDREDR

Industry Keywords

CybersecurityInsuranceFinancial ServicesHealthcareCloud SecurityData ExfiltrationBusiness Email CompromiseAdvanced Persistent ThreatsNIST Cybersecurity FrameworkISO 27001

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Lead collection, analysis, and operationalization of cyber threat intelligence from internal telemetry, commercial providers, OSINT, and industry sharing groups.
Analyze adversary TTPs using MITRE ATT&CK and translate intelligence into detections, monitoring requirements, investigations, and security control improvements.
Develop intelligence reports, threat briefs, and executive summaries.
Track industry-specific threats affecting insurance, financial services, healthcare, cloud platforms, and software supply chains.
Lead advanced investigations involving account compromise, insider threats, ransomware, malware, cloud attacks, phishing, BEC, data exfiltration, and unauthorized access.
Analyze SIEM, XDR, EDR, email security, identity, cloud, and network security alerts.
Correlate logs, endpoint telemetry, cloud activity, authentication records, and threat intelligence to determine scope, impact, and root cause.
Conduct forensic investigations across endpoints, servers, Microsoft 365, Azure, identity platforms, email systems, cloud workloads, and hybrid environments.
Acquire, preserve, analyze, and document digital evidence while maintaining chain of custody and evidentiary integrity.
Perform memory analysis, artifact collection, timeline reconstruction, log validation, malware triage, and root-cause investigations.
Design and execute proactive threat-hunting activities across Azure, Microsoft 365, Sentinel, Microsoft XDR, Defender for Endpoint, Entra ID, network telemetry, and cloud application logs.
Develop detection logic, correlation rules, behavioral analytics, watchlists, hunting queries, automated workflows, and case-management integrations.
Serve as lead technical responder during incidents, coordinating containment, eradication, recovery, and post-incident analysis.
Facilitate technical war rooms and provide status updates to leadership, technology, legal, and executive stakeholders.
Support incident response exercises, tabletop simulations, and cyber resilience testing.
Optimize Microsoft Sentinel, Microsoft XDR, Defender for Endpoint, Defender for Cloud, Entra ID, CrowdStrike, and related technologies.
Develop metrics and reporting for detection performance, investigation quality, containment effectiveness, MTTA, and MTTR.
Provide quality review, mentoring, escalation support, and oversight for analysts, offshore resources, MSSPs, and security operations partners.
Develop playbooks, forensic procedures, threat-hunting methodologies, SOPs, training materials, reports, runbooks, diagrams, and executive briefings.

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Digital Forensics, Information Assurance, or a related discipline; equivalent professional experience may be considered.
Minimum 10 years of progressive experience in Security Operations, Threat Intelligence, Incident Response, Threat Hunting, Digital Forensics, or Cyber Defense roles within enterprise environments.
Demonstrated experience conducting complex investigations involving ransomware, business email compromise (BEC), insider threats, account compromise, malware infections, cloud security incidents, advanced persistent threats (APT), and data exfiltration events.
Advanced knowledge of cyber threat intelligence methodologies, including collection, enrichment, analysis, and operationalization of intelligence.
Strong understanding of adversary tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK, Cyber Kill Chain, Diamond Model, and ATT&CK Navigator.
Experience converting threat intelligence into detections, hunting hypotheses, correlation rules, watchlists, automated response actions, and security control enhancements.
Deep experience performing digital forensic investigations across endpoints, servers, Microsoft 365, Azure, cloud workloads, email platforms, identity systems, and hybrid environments.
Hands-on expertise in forensic evidence acquisition, preservation, chain-of-custody management, timeline construction, artifact analysis, memory analysis, malware triage, and root-cause determination.
Strong analytical skills correlating endpoint telemetry, cloud logs, authentication records, network activity, SIEM data, threat intelligence, and forensic artifacts.
Extensive experience conducting proactive threat hunting across Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, CrowdStrike, Microsoft 365, Entra ID, Azure, endpoint telemetry, cloud platforms, and network security data sources.
Expertise developing advanced detection content, including SIEM analytics rules, behavioral detections, KQL hunting queries, automation workflows, enrichment logic, and incident investigation playbooks.
Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Defender for Identity, Microsoft Purview, Entra ID, and related security monitoring platforms.
Strong understanding of log analysis, packet analysis, endpoint investigations, cloud security monitoring, attack-path analysis, and forensic validation techniques.
Experience leading technical response activities during cybersecurity incidents, including containment, eradication, recovery, evidence preservation, executive communications, and post-incident reviews.
Experience producing forensic reports, threat intelligence assessments, attack narratives, executive briefings, and technical documentation.
Knowledge of regulatory and compliance requirements impacting security investigations.
Strong understanding of NIST Cybersecurity Framework, NIST 800-61, NIST 800-86, NIST 800-53, MITRE ATT&CK, CIS Controls, ISO 27001, and ISO 27035.
Excellent written and verbal communication skills.
Ability to act as a senior technical escalation resource, mentor junior analysts, and provide quality oversight for offshore teams, MSSPs, and security operations partners.
Strong attention to detail, intellectual curiosity, investigative mindset, and ability to independently manage high-priority investigations while balancing concurrent security events.

Benefits

Comp & perks

Healthcare, parental leave and opportunities for career advancements
Comprehensive full medical, dental and vision Insurance
Basic Life Insurance at no cost to the employee
Company paid short-term and long-term disability
12 weeks of 100% paid Parental Leave
Health Savings Account (HSA)
Flexible Spending Accounts (FSA)
Retirement savings plan
Personal Paid Time Off
Paid holidays and company-wide Wellness Day off
Paid time off to volunteer at nonprofit organizations
Pet friendly office environment
Commuter Benefits
Group Pet Insurance
On the job training and skills development
Employee Assistance Program (EAP)