Detection and Response Lead
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Use - for any list of duties/requirements/benefits, and
for prose. Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it. Preserve ALL substantive information; do NOT invent or summarize away detail. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. IMPORTANT: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text (e.g. "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. Prefer a few substantive sections over many thin ones. Output ONLY the HTML fragment — no /, no markdown code fences.
Thus we need to decide which sections to include. The posting includes:
- About Integrated Specialty Coverages (company description) – could be "About the role"? Actually "About the role" is generic; but we have company description. Could use "About the role" heading for company description? The instruction says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can use those exact headings if content matches. For company description maybe "About the role" is appropriate (though it's about company). We'll include About the role
with paragraph(s) describing ISC.
- Job Summary: could be part of About the role? Might be separate but we can incorporate into About the role paragraph.
- Position Responsibilities: we can use Responsibilities
with - items.
- Minimum Qualifications: could be
Requirements
or Qualifications
. The instruction list includes Requirements, Qualifications, Skills. We have Minimum Qualifications and Preferred Qualifications. Could combine into Requirements (minimum) and maybe Skills? But better to follow instruction: Use headings as given; we can have Requirements
for minimum qualifications, and Qualifications
for preferred? Or we could have Skills
for preferred? However we need to avoid thin sections. Perhaps combine Minimum and Preferred into one Qualifications
with two sublists? But instruction says use - for any list of duties/requirements/benefits. Could have separate lists under same heading.
We also have Benefits: we can use
Benefits
with list.
Pay: we have National Pay Range and mention bonus pay. So we can include Pay
with paragraph(s) describing range and bonus.
Schedule: not mentioned, so omit.
We must not include boilerplate like EEO, accommodation contact, etc. Remove those.
We must preserve all substantive information: company description, job summary, responsibilities (incident response, threat hunting, detection quality, escalation ownership, operational security leadership), minimum qualifications, preferred qualifications, benefits, pay range, bonus pay.
We need to ensure we don't repeat content unnecessarily.
Let's extract substantive content:
About Integrated Specialty Coverages paragraph: "Integrated Specialty Coverages, LLC (ISC) is a growth stage technology and data-driven commercial MGA and insurance wholesaler leading innovation in the market. Backed by one of the leading private equity firms, Onex Partners, and led by a forward-thinking management team, ISC is combining the worlds of insurance and technology to create an Insurtech powerhouse. As a leading online distributor of insurance products for a range of industries and “Main Street USA”, we are looking for the right people to help us in our mission of achieving exponential growth. We strive to be the number one place to go for brokers and agents to source insurance. To accomplish this, we’re building a digitally focused team that deeply understands the intersection between user experience, data, and AI/ML to optimize the way we engage with our customers and partners."
Job Summary: "ISC Cybersecurity is seeking a senior, hands‑on defender to build a detection and response function responsible for defensive security operations across our enterprise and AWS environments. The role will report to the CISO and will partner with internal security engineering, as well as with our managed security services provider (MSSP) and managed detection and response (MDR) provider. The Detection & Response Lead focuses on detection engineering, advanced investigation, incident ownership, threat hunting, and maturing our detection and response capabilities. The role serves as the escalation point for security events, ensuring timely containment, high‑quality analysis, and actionable recommendations for improvement. This position is operational and technically deep, driving defensive execution across our AWS and enterprise environments."
Position Responsibilities: bullet points under headings:
Incident Response & Investigation:
- Conduct incident response for escalated MSSP/MDR alerts, including scoping, investigation, and containment across cloud and endpoint environments. Emergency-only on-call availability is required for high-severity incidents.
- Perform forensic review of affected systems, including log correlation, event reconstruction, and identification of attacker techniques. Key tooling includes SIEM, EDR, proxy, WAF, and DLP technologies.
- Provide clear incident findings, timelines, and recommended remediation steps to technical and non‑technical stakeholders.
Threat Hunting:
- Conduct hypothesis‑driven and data‑driven hunts to identify malicious or suspicious activity not already surfaced by automated detections or MSSP/MDR workflows.
- Develop internal hunting methodologies rooted in observed attacker behavior, business‑specific risks, and historical incident patterns.
- Document and socialize hunt outcomes, including new detection opportunities and defensive insights.
Detection Quality & Continuous Improvement:
- Review MSSP/MDR escalations for quality, signal‑to‑noise ratio, and fidelity; drive improvements through structured feedback loops.
- Identify gaps in log coverage, detection logic, or monitoring effectiveness and coordinate with engineering partners to close them.
- Drive Mean-Time-To-Detect and Mean-Time-To-Contain metrics as well as detection coverage metrics.
Escalation Ownership & Internal Coordination:
- Serve as the technical escalation point for security incidents requiring deep analytical expertise.
- Coordinate cross‑functional responders (IT, cloud, application owners) during active investigations.
- Maintain tight alignment with MSSP/MDR workflows, ensuring clarity in escalation criteria, response procedures, and incident severity thresholds.
Operational Security Leadership:
- Report to CISO and interface with senior leadership during incidents.
- Maintain operational runbooks, investigation procedures, and response guides.
- Track recurring attacker patterns and translate them into defensible operational playbooks.
Minimum Qualifications:
- Bachelors in Computer Science, Cybersecurity or equivalent work experience
- 7+ years of hands‑on experience in cybersecurity operations, incident response, or threat detection.
- Demonstrated ability to lead complex investigations involving cloud environments, identity systems, and modern endpoint tooling.
- Experience building or shaping a detection and response program in partnership with leadership.
- Strong familiarity with attacker TTPs (e.g., MITRE ATT&CK), log analysis, and correlation techniques.
- Practical experience with digital forensics fundamentals (artifact analysis, timeline creation, host/network investigation).
- Ability to interpret MDR escalations and independently drive deeper analysis and containment actions.
- Experience analyzing AWS and Azure security logs (CloudTrail, CloudWatch, IAM, network telemetry, workload‑level events) and taking containment measures in cloud environments.
- Excellent written and verbal communication skills, including the ability to produce concise, high‑clarity investigative findings.
Preferred Qualifications:
- Experience working in environments leveraging a managed SOC/MDR provider and understanding how to integrate internal and external workflows effectively.
- Prior experience conducting threat hunts in cloud‑first or hybrid environments.
- Exposure to SIEM/SOAR platforms from an investigative.
- Incident response or forensics‑related certifications (e.g., GCIH, GCFA, GNFA, GCFE).
- This role also offers bonus pay. Your ISC Talent Acquisition representative will share more details about the bonus component should you advance in the interview process.
Benefits of Working at ISC:
List: Employee Ownership Program, Professional development opportunities, Owner Referral Program, Work from home reimbursement for remote/hybrid roles, Canary emergency financial assistance program, Comprehensive medical, dental, vision, Life/AD&D Insurance, Confidential, Employee Assistance Program, Health Savings Account, includes company contribution, Short-term disability, Voluntary benefits - supplemental accident, critical illness, hospital insurance, Employee discounts, 401(k) Plan with company match contribution, Addition Wealth Financial Wellness Program, Various Time Off Programs, 11 company paid holidays.
Pay: National Pay Range: $160,000 USD - $200,000 USD. Also mention starting annual pay scale based on skills etc. Also bonus pay.
We need to avoid duplication: The "starting annual pay scale" paragraph is somewhat generic; we can include that as part of Pay section.
We must not include boilerplate: accommodation contact, EEO statement, E-Verify, etc. Also remove duplicated lines like "ISC believes in creating long-term relationships..." etc. Also remove "Applicants may contact..." etc.
Now craft HTML.
We'll have sections:
About the role
Integrated Specialty Coverages, LLC (ISC) is a growth stage technology and data-driven commercial MGA and insurance wholesaler leading innovation in the market. Backed by one of the leading private equity firms, Onex Partners, and led by a forward-thinking management team, ISC is combining the worlds of insurance and technology to create an Insurtech powerhouse. As a leading online distributor of insurance products for a range of industries and “Main Street USA”, we are looking for the right people to help us in our mission of achieving exponential growth. We strive to be the number one place to go for brokers and agents to source insurance. To accomplish this, we’re building a digitally focused team that deeply understands the intersection between user experience, data, and AI/ML to optimize the way we engage with our customers and partners.
ISC Cybersecurity is seeking a senior, hands‑on defender to build a detection and response function responsible for defensive security operations across our enterprise and AWS environments. The role will report to the CISO and will partner with internal security engineering, as well as with our managed security services provider (MSSP) and managed detection and response (MDR) provider. The Detection & Response Lead focuses on detection engineering, advanced investigation, incident ownership, threat hunting, and maturing our detection and response capabilities. The role serves as the escalation point for security events, ensuring timely containment, high‑quality analysis, and actionable recommendations for improvement. This position is operational and technically deep, driving defensive execution across our AWS and enterprise environments.
Then Responsibilities:
Responsibilities
- Conduct incident response for escalated MSSP/MDR alerts, including scoping, investigation, and containment across cloud and endpoint environments. Emergency-only on-call availability is required for high-severity incidents.
- Perform forensic review of affected systems, including log correlation, event reconstruction, and identification of attacker techniques. Key tooling includes SIEM, EDR, proxy, WAF, and DLP technologies.
for prose. Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it. Preserve ALL substantive information; do NOT invent or summarize away detail. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. IMPORTANT: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text (e.g. "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. Prefer a few substantive sections over many thin ones. Output ONLY the HTML fragment — no /, no markdown code fences. Thus we need to decide which sections to include. The posting includes: - About Integrated Specialty Coverages (company description) – could be "About the role"? Actually "About the role" is generic; but we have company description. Could use "About the role" heading for company description? The instruction says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can use those exact headings if content matches. For company description maybe "About the role" is appropriate (though it's about company). We'll include About the role
with paragraph(s) describing ISC.
- Job Summary: could be part of About the role? Might be separate but we can incorporate into About the role paragraph.
- Position Responsibilities: we can use Responsibilities
with - items.
- Minimum Qualifications: could be
Requirements
or Qualifications
. The instruction list includes Requirements, Qualifications, Skills. We have Minimum Qualifications and Preferred Qualifications. Could combine into Requirements (minimum) and maybe Skills? But better to follow instruction: Use headings as given; we can have Requirements
for minimum qualifications, and Qualifications
for preferred? Or we could have Skills
for preferred? However we need to avoid thin sections. Perhaps combine Minimum and Preferred into one Qualifications
with two sublists? But instruction says use - for any list of duties/requirements/benefits. Could have separate lists under same heading.
We also have Benefits: we can use
Benefits
with list.
Pay: we have National Pay Range and mention bonus pay. So we can include Pay
with paragraph(s) describing range and bonus.
Schedule: not mentioned, so omit.
We must not include boilerplate like EEO, accommodation contact, etc. Remove those.
We must preserve all substantive information: company description, job summary, responsibilities (incident response, threat hunting, detection quality, escalation ownership, operational security leadership), minimum qualifications, preferred qualifications, benefits, pay range, bonus pay.
We need to ensure we don't repeat content unnecessarily.
Let's extract substantive content:
About Integrated Specialty Coverages paragraph: "Integrated Specialty Coverages, LLC (ISC) is a growth stage technology and data-driven commercial MGA and insurance wholesaler leading innovation in the market. Backed by one of the leading private equity firms, Onex Partners, and led by a forward-thinking management team, ISC is combining the worlds of insurance and technology to create an Insurtech powerhouse. As a leading online distributor of insurance products for a range of industries and “Main Street USA”, we are looking for the right people to help us in our mission of achieving exponential growth. We strive to be the number one place to go for brokers and agents to source insurance. To accomplish this, we’re building a digitally focused team that deeply understands the intersection between user experience, data, and AI/ML to optimize the way we engage with our customers and partners."
Job Summary: "ISC Cybersecurity is seeking a senior, hands‑on defender to build a detection and response function responsible for defensive security operations across our enterprise and AWS environments. The role will report to the CISO and will partner with internal security engineering, as well as with our managed security services provider (MSSP) and managed detection and response (MDR) provider. The Detection & Response Lead focuses on detection engineering, advanced investigation, incident ownership, threat hunting, and maturing our detection and response capabilities. The role serves as the escalation point for security events, ensuring timely containment, high‑quality analysis, and actionable recommendations for improvement. This position is operational and technically deep, driving defensive execution across our AWS and enterprise environments."
Position Responsibilities: bullet points under headings:
Incident Response & Investigation:
- Conduct incident response for escalated MSSP/MDR alerts, including scoping, investigation, and containment across cloud and endpoint environments. Emergency-only on-call availability is required for high-severity incidents.
- Perform forensic review of affected systems, including log correlation, event reconstruction, and identification of attacker techniques. Key tooling includes SIEM, EDR, proxy, WAF, and DLP technologies.
- Provide clear incident findings, timelines, and recommended remediation steps to technical and non‑technical stakeholders.
Threat Hunting:
- Conduct hypothesis‑driven and data‑driven hunts to identify malicious or suspicious activity not already surfaced by automated detections or MSSP/MDR workflows.
- Develop internal hunting methodologies rooted in observed attacker behavior, business‑specific risks, and historical incident patterns.
- Document and socialize hunt outcomes, including new detection opportunities and defensive insights.
Detection Quality & Continuous Improvement:
- Review MSSP/MDR escalations for quality, signal‑to‑noise ratio, and fidelity; drive improvements through structured feedback loops.
- Identify gaps in log coverage, detection logic, or monitoring effectiveness and coordinate with engineering partners to close them.
- Drive Mean-Time-To-Detect and Mean-Time-To-Contain metrics as well as detection coverage metrics.
Escalation Ownership & Internal Coordination:
- Serve as the technical escalation point for security incidents requiring deep analytical expertise.
- Coordinate cross‑functional responders (IT, cloud, application owners) during active investigations.
- Maintain tight alignment with MSSP/MDR workflows, ensuring clarity in escalation criteria, response procedures, and incident severity thresholds.
Operational Security Leadership:
- Report to CISO and interface with senior leadership during incidents.
- Maintain operational runbooks, investigation procedures, and response guides.
- Track recurring attacker patterns and translate them into defensible operational playbooks.
Minimum Qualifications:
- Bachelors in Computer Science, Cybersecurity or equivalent work experience
- 7+ years of hands‑on experience in cybersecurity operations, incident response, or threat detection.
- Demonstrated ability to lead complex investigations involving cloud environments, identity systems, and modern endpoint tooling.
- Experience building or shaping a detection and response program in partnership with leadership.
- Strong familiarity with attacker TTPs (e.g., MITRE ATT&CK), log analysis, and correlation techniques.
- Practical experience with digital forensics fundamentals (artifact analysis, timeline creation, host/network investigation).
- Ability to interpret MDR escalations and independently drive deeper analysis and containment actions.
- Experience analyzing AWS and Azure security logs (CloudTrail, CloudWatch, IAM, network telemetry, workload‑level events) and taking containment measures in cloud environments.
- Excellent written and verbal communication skills, including the ability to produce concise, high‑clarity investigative findings.
Preferred Qualifications:
- Experience working in environments leveraging a managed SOC/MDR provider and understanding how to integrate internal and external workflows effectively.
- Prior experience conducting threat hunts in cloud‑first or hybrid environments.
- Exposure to SIEM/SOAR platforms from an investigative.
- Incident response or forensics‑related certifications (e.g., GCIH, GCFA, GNFA, GCFE).
- This role also offers bonus pay. Your ISC Talent Acquisition representative will share more details about the bonus component should you advance in the interview process.
Benefits of Working at ISC:
List: Employee Ownership Program, Professional development opportunities, Owner Referral Program, Work from home reimbursement for remote/hybrid roles, Canary emergency financial assistance program, Comprehensive medical, dental, vision, Life/AD&D Insurance, Confidential, Employee Assistance Program, Health Savings Account, includes company contribution, Short-term disability, Voluntary benefits - supplemental accident, critical illness, hospital insurance, Employee discounts, 401(k) Plan with company match contribution, Addition Wealth Financial Wellness Program, Various Time Off Programs, 11 company paid holidays.
Pay: National Pay Range: $160,000 USD - $200,000 USD. Also mention starting annual pay scale based on skills etc. Also bonus pay.
We need to avoid duplication: The "starting annual pay scale" paragraph is somewhat generic; we can include that as part of Pay section.
We must not include boilerplate: accommodation contact, EEO statement, E-Verify, etc. Also remove duplicated lines like "ISC believes in creating long-term relationships..." etc. Also remove "Applicants may contact..." etc.
Now craft HTML.
We'll have sections:
About the role
Integrated Specialty Coverages, LLC (ISC) is a growth stage technology and data-driven commercial MGA and insurance wholesaler leading innovation in the market. Backed by one of the leading private equity firms, Onex Partners, and led by a forward-thinking management team, ISC is combining the worlds of insurance and technology to create an Insurtech powerhouse. As a leading online distributor of insurance products for a range of industries and “Main Street USA”, we are looking for the right people to help us in our mission of achieving exponential growth. We strive to be the number one place to go for brokers and agents to source insurance. To accomplish this, we’re building a digitally focused team that deeply understands the intersection between user experience, data, and AI/ML to optimize the way we engage with our customers and partners.
ISC Cybersecurity is seeking a senior, hands‑on defender to build a detection and response function responsible for defensive security operations across our enterprise and AWS environments. The role will report to the CISO and will partner with internal security engineering, as well as with our managed security services provider (MSSP) and managed detection and response (MDR) provider. The Detection & Response Lead focuses on detection engineering, advanced investigation, incident ownership, threat hunting, and maturing our detection and response capabilities. The role serves as the escalation point for security events, ensuring timely containment, high‑quality analysis, and actionable recommendations for improvement. This position is operational and technically deep, driving defensive execution across our AWS and enterprise environments.
Then Responsibilities:
Responsibilities
- Conduct incident response for escalated MSSP/MDR alerts, including scoping, investigation, and containment across cloud and endpoint environments. Emergency-only on-call availability is required for high-severity incidents.
- Perform forensic review of affected systems, including log correlation, event reconstruction, and identification of attacker techniques. Key tooling includes SIEM, EDR, proxy, WAF, and DLP technologies.
Requirements
orQualifications
. The instruction list includes Requirements, Qualifications, Skills. We have Minimum Qualifications and Preferred Qualifications. Could combine into Requirements (minimum) and maybe Skills? But better to follow instruction: Use headings as given; we can haveRequirements
for minimum qualifications, andQualifications
for preferred? Or we could haveSkills
for preferred? However we need to avoid thin sections. Perhaps combine Minimum and Preferred into oneQualifications
with two sublists? But instruction says use- for any list of duties/requirements/benefits. Could have separate lists under same heading.
We also have Benefits: we can use
Benefits
with list. Pay: we have National Pay Range and mention bonus pay. So we can includePay
with paragraph(s) describing range and bonus. Schedule: not mentioned, so omit. We must not include boilerplate like EEO, accommodation contact, etc. Remove those. We must preserve all substantive information: company description, job summary, responsibilities (incident response, threat hunting, detection quality, escalation ownership, operational security leadership), minimum qualifications, preferred qualifications, benefits, pay range, bonus pay. We need to ensure we don't repeat content unnecessarily. Let's extract substantive content: About Integrated Specialty Coverages paragraph: "Integrated Specialty Coverages, LLC (ISC) is a growth stage technology and data-driven commercial MGA and insurance wholesaler leading innovation in the market. Backed by one of the leading private equity firms, Onex Partners, and led by a forward-thinking management team, ISC is combining the worlds of insurance and technology to create an Insurtech powerhouse. As a leading online distributor of insurance products for a range of industries and “Main Street USA”, we are looking for the right people to help us in our mission of achieving exponential growth. We strive to be the number one place to go for brokers and agents to source insurance. To accomplish this, we’re building a digitally focused team that deeply understands the intersection between user experience, data, and AI/ML to optimize the way we engage with our customers and partners." Job Summary: "ISC Cybersecurity is seeking a senior, hands‑on defender to build a detection and response function responsible for defensive security operations across our enterprise and AWS environments. The role will report to the CISO and will partner with internal security engineering, as well as with our managed security services provider (MSSP) and managed detection and response (MDR) provider. The Detection & Response Lead focuses on detection engineering, advanced investigation, incident ownership, threat hunting, and maturing our detection and response capabilities. The role serves as the escalation point for security events, ensuring timely containment, high‑quality analysis, and actionable recommendations for improvement. This position is operational and technically deep, driving defensive execution across our AWS and enterprise environments." Position Responsibilities: bullet points under headings: Incident Response & Investigation: - Conduct incident response for escalated MSSP/MDR alerts, including scoping, investigation, and containment across cloud and endpoint environments. Emergency-only on-call availability is required for high-severity incidents. - Perform forensic review of affected systems, including log correlation, event reconstruction, and identification of attacker techniques. Key tooling includes SIEM, EDR, proxy, WAF, and DLP technologies. - Provide clear incident findings, timelines, and recommended remediation steps to technical and non‑technical stakeholders. Threat Hunting: - Conduct hypothesis‑driven and data‑driven hunts to identify malicious or suspicious activity not already surfaced by automated detections or MSSP/MDR workflows. - Develop internal hunting methodologies rooted in observed attacker behavior, business‑specific risks, and historical incident patterns. - Document and socialize hunt outcomes, including new detection opportunities and defensive insights. Detection Quality & Continuous Improvement: - Review MSSP/MDR escalations for quality, signal‑to‑noise ratio, and fidelity; drive improvements through structured feedback loops. - Identify gaps in log coverage, detection logic, or monitoring effectiveness and coordinate with engineering partners to close them. - Drive Mean-Time-To-Detect and Mean-Time-To-Contain metrics as well as detection coverage metrics. Escalation Ownership & Internal Coordination: - Serve as the technical escalation point for security incidents requiring deep analytical expertise. - Coordinate cross‑functional responders (IT, cloud, application owners) during active investigations. - Maintain tight alignment with MSSP/MDR workflows, ensuring clarity in escalation criteria, response procedures, and incident severity thresholds. Operational Security Leadership: - Report to CISO and interface with senior leadership during incidents. - Maintain operational runbooks, investigation procedures, and response guides. - Track recurring attacker patterns and translate them into defensible operational playbooks. Minimum Qualifications: - Bachelors in Computer Science, Cybersecurity or equivalent work experience - 7+ years of hands‑on experience in cybersecurity operations, incident response, or threat detection. - Demonstrated ability to lead complex investigations involving cloud environments, identity systems, and modern endpoint tooling. - Experience building or shaping a detection and response program in partnership with leadership. - Strong familiarity with attacker TTPs (e.g., MITRE ATT&CK), log analysis, and correlation techniques. - Practical experience with digital forensics fundamentals (artifact analysis, timeline creation, host/network investigation). - Ability to interpret MDR escalations and independently drive deeper analysis and containment actions. - Experience analyzing AWS and Azure security logs (CloudTrail, CloudWatch, IAM, network telemetry, workload‑level events) and taking containment measures in cloud environments. - Excellent written and verbal communication skills, including the ability to produce concise, high‑clarity investigative findings. Preferred Qualifications: - Experience working in environments leveraging a managed SOC/MDR provider and understanding how to integrate internal and external workflows effectively. - Prior experience conducting threat hunts in cloud‑first or hybrid environments. - Exposure to SIEM/SOAR platforms from an investigative. - Incident response or forensics‑related certifications (e.g., GCIH, GCFA, GNFA, GCFE). - This role also offers bonus pay. Your ISC Talent Acquisition representative will share more details about the bonus component should you advance in the interview process. Benefits of Working at ISC: List: Employee Ownership Program, Professional development opportunities, Owner Referral Program, Work from home reimbursement for remote/hybrid roles, Canary emergency financial assistance program, Comprehensive medical, dental, vision, Life/AD&D Insurance, Confidential, Employee Assistance Program, Health Savings Account, includes company contribution, Short-term disability, Voluntary benefits - supplemental accident, critical illness, hospital insurance, Employee discounts, 401(k) Plan with company match contribution, Addition Wealth Financial Wellness Program, Various Time Off Programs, 11 company paid holidays. Pay: National Pay Range: $160,000 USD - $200,000 USD. Also mention starting annual pay scale based on skills etc. Also bonus pay. We need to avoid duplication: The "starting annual pay scale" paragraph is somewhat generic; we can include that as part of Pay section. We must not include boilerplate: accommodation contact, EEO statement, E-Verify, etc. Also remove duplicated lines like "ISC believes in creating long-term relationships..." etc. Also remove "Applicants may contact..." etc. Now craft HTML. We'll have sections:About the role
Integrated Specialty Coverages, LLC (ISC) is a growth stage technology and data-driven commercial MGA and insurance wholesaler leading innovation in the market. Backed by one of the leading private equity firms, Onex Partners, and led by a forward-thinking management team, ISC is combining the worlds of insurance and technology to create an Insurtech powerhouse. As a leading online distributor of insurance products for a range of industries and “Main Street USA”, we are looking for the right people to help us in our mission of achieving exponential growth. We strive to be the number one place to go for brokers and agents to source insurance. To accomplish this, we’re building a digitally focused team that deeply understands the intersection between user experience, data, and AI/ML to optimize the way we engage with our customers and partners.
ISC Cybersecurity is seeking a senior, hands‑on defender to build a detection and response function responsible for defensive security operations across our enterprise and AWS environments. The role will report to the CISO and will partner with internal security engineering, as well as with our managed security services provider (MSSP) and managed detection and response (MDR) provider. The Detection & Response Lead focuses on detection engineering, advanced investigation, incident ownership, threat hunting, and maturing our detection and response capabilities. The role serves as the escalation point for security events, ensuring timely containment, high‑quality analysis, and actionable recommendations for improvement. This position is operational and technically deep, driving defensive execution across our AWS and enterprise environments.
Then Responsibilities:Responsibilities
- Conduct incident response for escalated MSSP/MDR alerts, including scoping, investigation, and containment across cloud and endpoint environments. Emergency-only on-call availability is required for high-severity incidents.
- Perform forensic review of affected systems, including log correlation, event reconstruction, and identification of attacker techniques. Key tooling includes SIEM, EDR, proxy, WAF, and DLP technologies.