Senior/Lead Security Engineer (Detection & Response)
Core
Build next-generation detection systems, own security monitoring and detection end-to-end, and lead investigations and incident response for IT and cloud environments.
Role type
Senior/Lead Security Engineer (Detection & Response)
Builds
Security monitoring pipelines, detection workflows, automation tools, and incident response playbooks
Domain
Cloud security, threat detection, incident response
Deliverable
production ML models
Required skills
detection engineering, incident response, threat hunting, cloud security monitoring, networking fundamentals, attacker tradecraft, scripting/programming (Python), security tooling (SIEM, EDR, SOAR), systems thinking
Preferred skills
AWS security telemetry (CloudTrail, GuardDuty, VPC Flow Logs, IAM), detection-as-code (Sigma, Git-based), EDR (CrowdStrike, SentinelOne, Defender), network security monitoring (PCAP, NetFlow/sFlow), digital forensics, threat intelligence, purple teaming, data centre security, AI-assisted development
Technologies
AWS, Python, SIEM, EDR, SOAR, CloudTrail, GuardDuty, VPC Flow Logs, IAM, Sigma, CrowdStrike, SentinelOne, Defender, PCAP, NetFlow/sFlow
Responsibilities
Own security monitoring and detection across AWS, identity, endpoints, SaaS, networks and data center environments; Build and maintain telemetry and logging pipelines; Lead security investigations and incident response; Proactively hunt for threats; Build automation to improve detection and response; Work with IT and Engineering to fix underlying problems; Develop and test incident response playbooks; Implement and enhance internal AI agents and security bots
Seniority
Senior/Lead, hands-on IC with leadership responsibilities
