> Markdown version of [/jobs/ext/3853662-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/3853662-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer

- **Company:** Kestra Financial
- **Location:** Sunset Valley, TX, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Digital Forensics, Intrusion Detection Systems, Microsoft Security Essentials, Red Team (Cyber Security), Kusto Query Language, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Vulnerability Analysis
- **Published:** October 21, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=4be1dcc537f37138

## About the Role

* 2+ years of proven experience in a similar role.
 * Bachelor's degree in Cybersecurity, IT or equivalent experience.
 * Security+ or equivalent certification (Microsoft security certifications are a plus)
 * A strong understanding of the Mitre Attack/Cyber Kill-Chain.
 * Proficiency/hands-on experience in Microsoft security tooling is a plus.

Internal Application Policy:
Internal applicants must be in good standing and have a minimum of 1 year of service with Kestra. Internal applicants must also have a minimum of 1 year service in current role unless approved by EVP.

## Description

We are seeking a Cybersecurity Incident Response Engineer to join our team and help defend our organization against evolving cyber threats. This role focuses on identifying, analyzing, and responding to security incidents across a diverse enterprise environment. The ideal candidate will have experience working with modern security information and event management (SIEM) platforms, endpoint detection and response (EDR) tools, and threat intelligence frameworks.

What you'll Do:

 * Manage alerts escalated by the SOC.
 * Challenge the SOC on potentially overlooked incidents.
 * Investigate and respond to security incidents using IDS suite tools.
 * Perform root cause analysis and develop mitigation strategies.
 * Perform audits.
 * Collaborate with SOC analysts, IT, and other stakeholders to contain and remediate threats.
 * Continuous Learning: Stay up to date with security trends, vulnerabilities, and best practices.
 * Develop and maintain incident response playbooks and procedures.
 * Conduct threat hunting activities using KQL and Sentinel workbooks.
 * Stay current with emerging threats, vulnerabilities, and security technologies.
 * Conduct digital forensics investigations to identify indicators of compromise (IOCs), determine attack vectors, and preserve evidence in accordance with legal and organizational standards.
 * Support internal and external audit activities by providing incident response documentation and evidence.
 * Contributes to the development and refinement of security policies, procedures, and operational practices.
 * Participate in red team and adversary simulation exercises to improve detection and response capabilities.