Senior Cyber Defense Incident Responder
AIG is hiring a Senior Cyber Defense Incident Responder. Level rates it ; you can apply on AIG.
Level's read on this job
- On Level's scale, this cybersecurity role is Uses AI ●●○○: an ordinary role that requires AI tools.
- Tools and skills the posting cites include SIEM, Soar and incident response.
- Level classifies it as a senior role.
- Level lists 410 other open roles at AIG.
AI in this role
Drive cyber incident response, detection engineering, and advance AI-driven security capabilities at AIG.
Reporting directly to the firm’s Cyber Incident Response Director, the successful candidate will serve as a senior technical escalation point for cyber incidents, using expertise in threat analysis, forensic investigations, detection engineering, and incident response to identify, contain, and remediate threats. They will collaborate with incident response, cyber threat intelligence, engineering, and business teams to strengthen AIG’s security posture.
This role will also help advance security capabilities through automation, SIEM and SOAR use cases, threat hunting, and AI-driven security solutions. The ideal candidate brings strong technical expertise, sound judgment, clear communication skills, and the ability to mentor analysts, establish best practices, and drive security improvements across teams.
Major Job Responsibilities:
- Leading complex incident investigations and serving as a senior technical escalation resource.
- Driving threat hunting, detection engineering, and security automation initiatives.
- Advancing AI and agentic security capabilities within Security Operations.
- Build and maintain runbooks to ensure operational readiness in a global, cloud-based environment
- Developing and improving SIEM, SOAR, and monitoring use cases.
- Partnering with stakeholders across technology, business, and security teams.
- Mentoring Tier 1 and Tier 2 analysts while promoting operational excellence.
- Identifying opportunities to improve security effectiveness through metrics, process optimization, and innovation.
Requirements:
- At least 7+ years of overall experience in Cyber or Information Security, consisting of a minimum of 5+ years’ recent experience in Cyber Security Operations or Cyber Incident Response
- Experience working in complex enterprises and global organizations. Insurance and financial services experience strongly encouraged.
- Strong Information Technology technical skills, with experience in coordination of technical teams and individual resources
- Able to work in high pressure environments, managing multiple workstreams simultaneously, both technical and non-technical
- Confident to command and instruct a variety of technical and non-technical stakeholders of all management levels
- Expertise in various types of cyber-attacks and Cyber Incident Handling
- An understanding of cyber security operations processes, procedures, guidelines and solutions, including practical experience of cyber kill chain principles
- Bachelor’s degree or equivalent practical experience is preferred.
- Excellent communication skills and the ability to collaborate effectively with cross-functional teams
- Proactive and self-motivated with the ability to work independently and manage multiple tasks simultaneously
#LI-PS1
At AIG, we value in-person collaboration as a vital part of our culture, which is why we ask our team members to be primarily in the office. This approach helps us work together effectively and create a supportive, connected environment for our team and clients alike.
Enjoy benefits that take care of what matters
At AIG, our people are our greatest asset. We know how important it is to protect and invest in what’s most important to you. That is why we created our Total Rewards Program, a comprehensive benefits package that extends beyond time spent at work to offer benefits focused on your health, wellbeing and financial security—as well as your professional development—to bring peace of mind to you and your family.
Reimagining insurance to make a bigger difference to the world
American International Group, Inc. (AIG) is a global leader in commercial and personal insurance solutions; we are one of the world’s most far-reaching property casualty networks. It is an exciting time to join us — across our operations, we are thinking in new and innovative ways to deliver ever-better solutions to our customers. At AIG, you can go further to support individuals, businesses, and communities, helping them to manage risk, respond to times of uncertainty and discover new potential. We invest in our largest asset, our people, through continuous learning and development, in a culture that celebrates everyone for who they are and what they want to become.
Welcome to a culture of inclusion
We’re committed to creating a culture that truly respects and celebrates each other’s talents, backgrounds, cultures, opinions and goals. We foster a culture of inclusion and belonging through learning, cultural awareness activities and Employee Resource Groups (ERGs). With global chapters, ERGs are a cornerstone for our culture of inclusion. The talent of our people is one of AIG’s greatest assets, and we are honored that our drive for positive change has been recognized by numerous recent awards and accreditations.
AIG provides equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories.
AIG is committed to working with and providing reasonable accommodations to job applicants and employees with disabilities. If you believe you need a reasonable accommodation, please send an email to candidatecare@aig.com.
Functional Area:
IT - Information TechnologyAIG Employee Services, Inc.How we rate this
Senior Cyber Defense Incident Responder at AIG rates 45 out of 100 for how much of the daily work is AI. That makes it Uses AI (AI Level 2 of 4). The level is about AI in the job, not seniority.
Uses AI. An ordinary role that requires AI tools.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Pay
- Typical cybersecurity job
- $161k
This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs
Questions you could be asked
- Tell me about a project where incident response was part of your work. What did you do?
- Tell me about a project where threat hunting was part of your work. What did you do?
- Tell me about a project where detection engineering was part of your work. What did you do?
- Tell me about a project where security automation was part of your work. What did you do?
- Walk me through how you've used SIEM in your day-to-day work.
Adapt your resume
- List these exact terms on your resume: Incident Response, Threat Hunting, Detection Engineering, Security Automation, and SIEM. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
- Put the AI tool in a bullet point about what you did, not just in a skills list. This role treats it as a required part of the job.
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new cybersecurity jobs (Uses AI ●●○○ or higher) by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Other roles that use AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step