Security Incident Response Engineer - EDR

Job Title:  Security Incident Response Engineer - EDR

Department:  Information Security

Location:  Remote or Hybrid (Grand Rapids, MI)

About Acrisure

Acrisure is a global Fintech leader that combines the best of humans and high tech to offer multiple financial products and services to millions of businesses and individual clients. We connect clients to solutions that help them protect and grow what matters, including Insurance, Reinsurance, Cyber Services, Mortgage Origination and more.

Acrisure employs over 17,000 entrepreneurial colleagues in 21 countries and have grown from $38 million to $4.3 billion in revenue in just over ten years. Our culture is defined by our entrepreneurial spirit and all that comes with it: innovation, client centricity and an indomitable will to win.

Responsibilities:

Incident Detection and Eradication:

• Conduct a thorough analysis of the incident, including its origins and impact.
• Collaborate with other teams to identify vulnerabilities and weaknesses in the security infrastructure and recommend improvements.
• Develop and implement strategies to remove the root cause of the incident.
• Ensure all malicious artifacts are eliminated from the environment.
• Use security tools and monitoring systems to identify and detect security incidents.
• Analyze security alerts and anomalies to determine if they represent actual security incidents.

EDR Deployment and Configuration:

• Install and configure EDR agents on endpoints for comprehensive coverage.
• Customize EDR settings based on organizational security policies.

• Ensure continuous endpoint monitoring and regular EDR updates.
• Provide training on EDR usage to incident response teams and end-users.
• Enforce security policies on endpoints through the EDR platform to ensure compliance with organizational standards.
• Regularly review and update endpoint security policies based on threat intelligence and incident learnings.

Communication and Documentation:

• Communicate with stakeholders, including management, IT teams, and legal departments, to provide updates on the incident response process.
• Maintain detailed records of incident response activities, including timelines, actions taken, and outcomes.
• Prepare incident reports for management and other stakeholders.
• Coordinate with external parties, such as law enforcement or third-party incident responders.

Education/Experience:

• Distinguished Professional: 3 to 5 years of experience in Information Security
• 1-3 years of experience in incident response, threat hunting, security engineering, or related area.
• Endpoint Detection and Response (EDR) Security: Proven experience with SentinelOne, Microsoft Defender, CrowdStrike, or other EDR toolsets.
• Expertise in Infrastructure Security: In-depth understanding of infrastructure security, including Windows, Active Directory, Unix/Linux, Mobile Security, and Privileged Access Management.
• DFIR certifications, such as GCIH, GCFA, CHFI, or CCFP are a plus.

Benefits & Perks:

• Competitive Compensation
• Industry Leading Healthcare
• Savings and Investments
• Charitable Giving Programs
• Offering hybrid work option           
• Opportunities for Growth
• Parental Leave
• Generous time away