Time Type: Full time
Worker Type: Employee
The Opportunity:
The Cyber Security Analyst is a key member of QBE’s Global Security Operations team, responsible for protecting enterprise systems, data, and services in an evolving threat landscape. This is a hands-on, technically focused role supporting advanced detection, investigation, and response activities across on‑prem, cloud, and SaaS environments.
The analyst will investigate and respond to security alerts escalated from Tier 1, conduct in‑depth analysis of complex incidents, and proactively identify threats before they impact the business. In partnership with technology teams and business stakeholders, this role contributes to improving QBE’s security posture through continuous improvement, innovation, and practical risk reduction.
We are looking for individuals who are passionate about cybersecurity, curious by nature, and motivated to continuously learn, challenge existing processes, and help shape the future of security operations
- Location: Madison, Wisconsin
- Work Arrangement: This role will be on a hybrid schedule with expectations of being in office 8-12 days a month
- The salary range for this role is: $74,000 = $111,500
-
Investigate and respond to security events and incidents across endpoint, identity, network, application, cloud, and SaaS environments.
-
Lead or support Tier 2/3 incident response, including containment, eradication, recovery, and post incident analysis.
-
Correlate multi-source telemetry (SIEM, EDR/XDR, cloud, identity, email, threat intelligence) to determine root cause, scope, and impact.
-
Provide clear, timely incident updates and risk assessments to technical teams and stakeholders.
-
Conduct proactive, hypothesis-driven threat hunting aligned to MITRE ATT&CK and current adversary tradecraft.
-
Analyze emerging threats, attacker behavior, and indicators relevant to the enterprise environment.
-
Improve detection capability by partnering with detection engineering to enhance coverage, fidelity, and reduce noise.
-
Investigate threats related to cloud workloads, SaaS platforms, and identity systems.
-
Analyze and respond to identity compromise, privilege abuse, misconfiguration, and unauthorized access scenarios.
-
Support implementation and validation of modern, Zero Trust-aligned security controls.
-
Drive improvements in detection, response, and analyst workflows through automation and process optimization.
-
Evaluate and operationalize new security technologies and capabilities.
-
Maintain accurate, defensible documentation of incidents and recommend enhancements to playbooks and procedures.
-
Partner with infrastructure, cloud, application, and identity teams to remediate issues and reduce risk.
-
Act as a technical resource for analysts and contribute to knowledge sharing and team development.
-
Communicate complex security concepts clearly to both technical and non-technical stakeholders.
Required Qualifications
-
Bachelor's Degree or equivalent
-
Experience contributing to security operations, incident response, or threat detection in an enterprise environment.
-
Hands‑on experience with security monitoring and analysis across:
-
Endpoint (EDR/XDR)
-
Identity (IAM, Active Directory, Entra ID)
-
Network and firewall technologies
-
Cloud platforms and SaaS environments
-
Leading incident response to malware, phishing, ransomware, cloud compromise, and identity attacks
-
Familiarity with SIEM platforms, alert triage, case management, and log correlation.
-
Writing and tuning detection queries using KQL, SPL, or similar languages.
-
Understanding of common attacker techniques, malware behavior, and modern threat trends.
-
Scripting or query experience using PowerShell, Python, or similar languages.
-
Strong analytical and problem‑solving abilities with attention to detail.
-
Ability to prioritize and manage multiple investigations simultaneously.
-
Clear, concise written and verbal communication skills.
-
Confidence making remediation and containment recommendations based on risk.
-
Self‑motivated, organized, and comfortable working with minimal supervision.
Skills: This section will automatically populate on the job req in Workday
-
Hybrid Working – a mix of working from home and in the office
-
22 weeks of paid leave for family growth, with 12 weeks available to all parents on a gender-equal basis
-
Competitive 401(k) program with company match up to 8%
-
Well-being program including holistic wellbeing coaching, gym membership, confidential counselling, financial and legal advice
-
Tuition Reimbursement for professional certifications, and continuing education
-
Employee Network and Community – QBE actively supports six Employee Networks, and many ways to give back to your community
To learn more, click here: Benefits | QBE US.
At QBE, we’re enabling a more resilient future – for our customers, communities, environment, and for our people. We’re building momentum to achieve something significant and know our people are at the center of our success.
Our industry offers interesting and varied careers where you can help people to protect what matters most. As part of the QBE team, you’ll get to spend every day working with people who are passionate, talented and kind. And our international scale means we’re big enough for your ambitions, yet small enough for you to make a real impact.
Join us now, so you can be part of our success – and we can be part of yours!
https://www.linkedin.com/company/qbe-north-america/
QBE is committed to providing reasonable accommodation to, among others, individuals with disabilities and disabled veterans. If you need an accommodation because of a disability to search and apply for a career opportunity with QBE, please inform our Talent Acquisition team to let us know the nature of your accommodation request and your contact information.
Equal Employment Opportunity:
QBE provides equal employment opportunities to applicants and employees without regard to race; color; gender; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; protected veteran status; or disability or any other legally protected status.
This position is not eligible for visa sponsorship. Applicants must be authorized to work in the United States on a full-time basis without the need for current or future sponsorship.
Supplementary information
Skills:
Analytical Thinking, Business Continuity, Critical Thinking, Customer Service, Financial Systems, Incident Response, Intentional collaboration, Malware Analysis, Managing performance, Prioritization, Process Improvements, Risk Management, Security Analysis, Security Incident Management, Stakeholder Management
How to Apply:
To submit your application, click "Apply" and follow the step by step process.
Equal Employment Opportunity:
QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates.
