Principal Incident Response Engineer

🔥 13 hours ago

🏰 Missouri – Remote

🏰 Missouri – Remote

💵 $126.7k - $188.8k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Reinsurance Group of America, Incorporated

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1973

💼 Consulting

📦 Logistics

🛡️ Insurance

Consulting • Logistics • Insurance

Reinsurance Group of America, Incorporated (RGA) is a leading global reinsurance company that focuses exclusively on life and health reinsurance solutions. With a strong commitment to providing innovative products and services, RGA helps its clients manage risk and enhance their insurance portfolios through its expertise in underwriting, claims management, and financial solutions. The company operates in multiple global markets, leveraging its extensive data and analytics capabilities to offer tailored solutions that meet the unique needs of the life and health insurance sectors.

📋 Description

• Lead enterprise incident response and cyber crisis engagements from detection through recovery • Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments • Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms • Develop containment, eradication, and remediation strategies aligned to business risk • Produce executive briefings, technical reports, board-ready updates, and post-incident reviews • Partner with legal, compliance, privacy, audit, and external stakeholders when required • Drive adoption of AI-assisted workflows to improve investigation speed, reporting quality, and operational efficiency • Support the 24/7 on-call rotation • Provide technical leadership during investigations and influence strategic security decisions • Contribute to security capability development and cybersecurity risk management readiness • Deliver measurable, cross-organizational projects • Enable global Security Operations through operations, development, and engineering

🎯 Requirements

• Master’s degree in Arts/Sciences (MA/MS) or equivalent experience required • 8+ years in incident response, DFIR, security operations, consulting, or related cybersecurity disciplines required • 10+ years of relevant experience preferred • Ability to lead complex incidents and evolve strategies based on new information • Experience leading major cyber incidents involving ransomware, business email compromise, insider threats, cloud compromise, supply chain attacks, or advanced persistent threats • Strong digital forensics capability using industry-standard forensic and triage tools • Experience with Splunk, Microsoft Defender, CrowdStrike Falcon, ServiceNow SIR, and cloud security technologies • Knowledge of network protocols, detection engineering, log analytics, and threat hunting methodologies • Strong verbal and written communication skills for technical and executive audiences • Ability to manage multiple priorities in a global enterprise environment • Experience with forensic tools such as FTK, EnCase, X-Ways, Magnet AXIOM, and SIFT • Advanced analytical, investigative, and problem-solving skills • Ability to adapt to new methods and work under tight deadlines and stressful conditions • Ability to handle multiple tasks, clients, and projects simultaneously • Ability to balance priorities, deadlines, and deliverables • Ability to translate business needs and problems into viable solutions • Knowledge of Windows, macOS, and Linux internals • Scripting experience with PowerShell, Python, JavaScript, or TypeScript • Experience with AWS, Microsoft 365, Microsoft domain environments, IAM/AAA technologies, Active Directory, Okta, OpenID, SAML, OAuth, JWT, networking, SIEM, EDR, threat intelligence platforms, email security, and DNS security • Industry-level contributions preferred • Professional industry certification preferred

🏖️ Benefits

• Annual bonus plan • Potential participation in long-term equity incentive plan for eligible positions • Health benefits • Retirement benefits • Other employee benefits • Knowledge and experience with diverse colleagues around the world • Respectful, welcoming environment • Career potential • AI-supported personalized job recommendations, interview scheduling, and chatbot answers during preliminary screening

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume