Information Security Engineer - Principal

Established in 2021, Independence Pet Holdings is a corporate holding company that manages a diverse and broad portfolio of modern pet health brands and services, including insurance, pet education, lost recovery services, and more throughout North America.

We believe pet insurance is more than a financial product and build solutions to simplify the pet parenting journey and help improve the well-being of pets. As a leading authority in the pet category, we operate with a full stack of resources, capital, and services to support pet parents. Our multi-brand and omni-channel approach include our own insurance carrier, insurance brands and partner brands. 

Position Summary:

We are seeking an experienced Principal Security Operations Lead to join the North America Information Security team, reporting directly to the Director of Security Operations. This is a hands-on technical role focused on incident response, threat intelligence, and forensic investigations across cloud and legacy environments.

The successful candidate will help support a unified enterprise security operations model, including the continued implementation of SIEM and detection tools across environments, advanced threat intelligence, and automated response processes. The role requires strong Microsoft Azure and Microsoft 365 security experience, multi-layer investigations, phishing response, clear communication, and the ability to work across Security Engineering, Security Operations, GRC, Infrastructure, Cloud, DevOps, application, and business teams.

This role is expected to act as the key contact for technical investigations, drive remediation, produce clear documentation and evidence, and provide quality review and escalation support for repeatable work performed by offshore or managed-service partners.

What You Will Do:

Threat Intelligence and Adversary Analysis

• Lead the collection, analysis, and operationalization of cyber threat intelligence from internal telemetry, commercial intelligence providers, open-source intelligence (OSINT), and industry sharing groups.

• Analyze adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK and translate intelligence into actionable detections, monitoring requirements, investigations, and security control improvements.

• Develop intelligence reports, threat briefs, and executive summaries that communicate emerging threats, risk trends, adversary activity, and potential business impacts.

• Track industry-specific threats affecting insurance, financial services, healthcare, cloud platforms, and software supply chains.

• Partner with Security Engineering and Security Architecture teams to incorporate threat intelligence into detection logic, control design, policy updates, and incident response processes.

Security Monitoring and Incident Investigation

• Lead advanced investigations involving suspicious activity, account compromise, insider threats, ransomware, malware infections, cloud attacks, phishing campaigns, business email compromise, data exfiltration, and unauthorized access attempts.

• Perform deep analysis of security alerts generated by SIEM, XDR, EDR, email security, identity platforms, cloud security

• solutions, and network security tools.

• Correlate logs, events, endpoint telemetry, cloud activity, authentication records, and threat intelligence to determine attack

• scope, impact, and root cause.

• Serve as an escalation point for complex investigations requiring advanced analytical skills, cross platform analysis, or forensic validation.

Digital Forensics and Evidence Preservation

• Conduct forensic investigations involving endpoints, servers, Microsoft 365, Azure, identity platforms, email systems, cloud workloads, and hybrid environments.
• Acquire, preserve, analyze, and document digital evidence while maintaining chain-of custody requirements and evidentiary integrity.
• Perform memory analysis, artifact collection, timeline reconstruction, log validation, malware triage, and root-cause investigations.
• Develop forensic findings reports that clearly document attack timelines, affected assets, responsible threat activity, business impact, and recommended remediation actions.
• Support legal, compliance, audit, and regulatory response activities requiring technical investigative evidence and forensic documentation.

Threat Hunting and Detection Engineering

• Design and execute proactive threat-hunting activities to identify malicious activity that may evade traditional detection methods.
• Hypothesis driven hunting across Azure, Microsoft 365, Sentinel, Microsoft XDR, Defender for Endpoint, Entra ID, network telemetry, and cloud application logs.
• Develop and improve advanced detection logic, correlation rules, behavioral analytics, watchlists, and hunting queries based onemerging threats and intelligence findings.
• Identify detection gaps and recommend new monitoring capabilities to improve visibility across cloud, endpoint, identity, and network environments.

• →Chicago Base pay range: $187,899 – $234,873 per year
• →Nationwide Base pay range: $170,871 - $213,521 per year

This is the range we reasonably expect to pay at hire. Placement within the range depends on job-related factors such as experience, skills, and certifications. This position is not eligible for an annual bonus. Base pay is one part of a total rewards package that includes the benefits listed below.

#iph

All of our jobs come with great benefits including healthcare, parental leave and opportunities for career advancements. Some offerings are dependent upon the location of where you work and can include the following:

• →

  Comprehensive full medical, dental and vision Insurance

• →

  Basic Life Insurance at no cost to the employee

• →

  Company paid short-term and long-term disability

• →

  12 weeks of 100% paid Parental Leave

• →

  Health Savings Account (HSA)

• →

  Flexible Spending Accounts (FSA)

• →

  Retirement savings plan

• →

  Personal Paid Time Off

• →

  Paid holidays and company-wide Wellness Day off

• →

  Paid time off to volunteer at nonprofit organizations

• →

  Pet friendly office environment

• →

  Commuter Benefits

• →

  Group Pet Insurance

• →

  On the job training and skills development

• →

  Employee Assistance Program (EAP)

Interview Technology Notice:

Please note that phone and video interviews or screenings may be recorded and transcribed using interview technology to support our recruitment process.

By continuing with the interview, you consent to this use.

Text Messaging Notice:

If you provide a mobile phone number, you may receive job-related communications via text message. Message and data rates may apply.

You may opt out of text communications at any time by replying “STOP.”