Threat Detection & Response Engineer III
Core
Design and implement security detections, incident response procedures, and threat hunting capabilities to secure corporate and cloud environments.
Role type
Senior Threat Detection & Response Engineer
Builds
Security tooling, detection rules, incident response playbooks, and automation workflows
Domain
Cybersecurity, Threat Detection, Incident Response, Cloud Security
Required skills
Security operations, detection engineering, incident response, threat hunting, EDR platforms, SIEM platforms, log analysis, MITRE ATT&CK, scripting (Python/PowerShell/Bash), endpoint security (Windows/MacOS/Linux)
Preferred skills
Digital forensics, malware analysis, Detections-as-Code, GitOps, CI/CD, red team/purple team exercises, cloud security monitoring (AWS/GCP/Azure), federal compliance frameworks (CMMC/FedRAMP/NIST)
Technologies
Splunk, Elastic, EDR, SIEM, Python, PowerShell, Bash, Azure GovCloud, AWS, GCP
Responsibilities
Develop incident response plans, playbooks, and SOPs; Design and implement custom security detections; Monitor, triage, and respond to security alerts; Perform incident investigations; Proactively hunt for threats; Administer and optimize EDR and SIEM platforms; Build automation and orchestration workflows
Seniority
Senior, hands-on IC