FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Principal Incident Response Engineer
Reinsurance Group of America, Incorporated. Lead enterprise incident response and cyber crisis engagements from detection through recovery .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in leading enterprise incident response and cyber crisis engagements, with a strong focus on advanced threat hunting, digital forensics, and strategic security decision-making. Proficient in managing complex incidents and developing remediation strategies while collaborating with cross-functional teams and stakeholders.
Highest-signal resume keywords
Incident Response LeadershipDigital Forensics ExpertiseAdvanced Threat HuntingCloud Security TechnologiesCommunication Skills
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident ResponseDigital ForensicsThreat HuntingScripting (PowerShell, Python, JavaScript, TypeScript)Network ProtocolsLog AnalyticsCompromise AssessmentsContainment StrategiesRemediation StrategiesAnalytical Skills
Soft Skills
Problem-SolvingAdaptabilityTime ManagementCommunicationLeadership
Tools & Technologies
SplunkMicrosoft DefenderCrowdStrike FalconServiceNow SIRFTKEnCaseX-WaysMagnet AXIOMSIFTSIEM
Certifications & Qualifications
Professional Industry Certification
Industry Keywords
CybersecurityDFIRSecurity OperationsRansomwareBusiness Email CompromiseInsider ThreatsCloud CompromiseSupply Chain AttacksAdvanced Persistent ThreatsCompliance
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityDNSJavaScriptLinuxMacOSPythonServiceNowSplunkTypeScript
About the role
Key responsibilities & impact- Lead enterprise incident response and cyber crisis engagements from detection through recovery
- Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments
- Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms
- Develop containment, eradication, and remediation strategies aligned to business risk
- Produce executive briefings, technical reports, board-ready updates, and post-incident reviews
- Partner with legal, compliance, privacy, audit, and external stakeholders when required
- Drive adoption of AI-assisted workflows to improve investigation speed, reporting quality, and operational efficiency
- Support the 24/7 on-call rotation
- Provide technical leadership during investigations and influence strategic security decisions
- Contribute to security capability development and cybersecurity risk management readiness
- Deliver measurable, cross-organizational projects
- Enable global Security Operations through operations, development, and engineering
Requirements
What you’ll need- Master’s degree in Arts/Sciences (MA/MS) or equivalent experience required
- 8+ years in incident response, DFIR, security operations, consulting, or related cybersecurity disciplines required
- 10+ years of relevant experience preferred
- Ability to lead complex incidents and evolve strategies based on new information
- Experience leading major cyber incidents involving ransomware, business email compromise, insider threats, cloud compromise, supply chain attacks, or advanced persistent threats
- Strong digital forensics capability using industry-standard forensic and triage tools
- Experience with Splunk, Microsoft Defender, CrowdStrike Falcon, ServiceNow SIR, and cloud security technologies
- Knowledge of network protocols, detection engineering, log analytics, and threat hunting methodologies
- Strong verbal and written communication skills for technical and executive audiences
- Ability to manage multiple priorities in a global enterprise environment
- Experience with forensic tools such as FTK, EnCase, X-Ways, Magnet AXIOM, and SIFT
- Advanced analytical, investigative, and problem-solving skills
- Ability to adapt to new methods and work under tight deadlines and stressful conditions
- Ability to handle multiple tasks, clients, and projects simultaneously
- Ability to balance priorities, deadlines, and deliverables
- Ability to translate business needs and problems into viable solutions
- Knowledge of Windows, macOS, and Linux internals
- Scripting experience with PowerShell, Python, JavaScript, or TypeScript
- Experience with AWS, Microsoft 365, Microsoft domain environments, IAM/AAA technologies, Active Directory, Okta, OpenID, SAML, OAuth, JWT, networking, SIEM, EDR, threat intelligence platforms, email security, and DNS security
- Industry-level contributions preferred
- Professional industry certification preferred
Benefits
Comp & perks- Annual bonus plan
- Potential participation in long-term equity incentive plan for eligible positions
- Health benefits
- Retirement benefits
- Other employee benefits
- Knowledge and experience with diverse colleagues around the world
- Respectful, welcoming environment
- Career potential
- AI-supported personalized job recommendations, interview scheduling, and chatbot answers during preliminary screening