Incident Response Engineer

This role plays a critical part in the organization’s security operations program, supporting incident response, threat detection, and asset intelligence across endpoints, identity, and cloud environments. The individual will work closely with security operations, IT, and engineering teams to investigate alerts, respond to incidents, and continuously seek for visibility improvements into enterprise assets using the Axonius platform.

On the incident response side, this role is responsible for triaging and analyzing security alerts, validating threats, and supporting containment and remediation efforts in accordance with established incident response procedures. The individual will help ensure incidents are accurately documented, escalated appropriately, and used as learning opportunities to strengthen detection coverage and reduce future risk.

From an asset intelligence perspective, this role will support the maintenance of a reliable enterprise asset inventory by analyzing asset data within Axonius, identifying visibility gaps, and escalating integration or data quality issues to appropriate teams. The individual will review data consistency across integrated systems, highlight discrepancies, and collaborate with IT and Engineering partners to drive resolution. Additionally, this role will also contribute to operational improvements by providing feedback on detection quality, supporting monitoring enhancements, and assisting with documentation and playbook updates to ensure consistent and repeatable security processes.

payrate - $70-$80/hr

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• 5+ years of experience investigating and responding to security alerts across endpoint, identity, and cloud environments, including EDR tooling
• Strong understanding of incident response workflows (analysis, containment, remediation, documentation, and escalation procedures)
• Experience working within Axonius to analyze asset data, validate integrations, and improve asset visibility and accuracy.
• Proven ability to validate asset data, identify discrepancies, and uncover visibility gaps across security and IT systems
• Ability to collaborate effectively with security, IT, and engineering teams

• Experience tuning detections to reduce false positives and improve signal fidelity
• Exposure to security monitoring enhancements, tooling optimization, or automation efforts
• Experience developing queries, dashboards, and reports for security or asset intelligence use cases
• Background contributing to documentation, operational playbooks, and runbooks
• Prior experience in a SOC, IR, or security operations environment

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.