Senior/Lead Security Engineer (Detection & Response)
Core
Build next-generation detection systems, own security monitoring and detection end-to-end, lead investigations and incident response, and automate security workflows using AI.
Role type
Senior/Lead Security Engineer (Detection & Response)
Builds
Security monitoring and detection pipelines, automated response workflows, and internal AI agents/bots for security operations.
Domain
Cloud security (AWS), IT infrastructure, and energy sector.
Deliverable
production ML models
Required skills
Detection engineering, incident response, threat hunting, cloud security monitoring (AWS), networking fundamentals, attacker tradecraft, scripting/programming (Python), SIEM/EDR/SOAR tooling, systems thinking.
Preferred skills
AWS security telemetry (CloudTrail, GuardDuty, VPC Flow Logs, IAM), detection-as-code (Sigma, Git-based), EDR (CrowdStrike, SentinelOne, Defender), network security monitoring (PCAP, NetFlow/sFlow), digital forensics, threat intelligence, purple teaming, data centre security, AI-assisted development.
Responsibilities
Own security monitoring and detection across AWS, identity, endpoints, SaaS, networks, and data center; build and maintain telemetry/logging pipelines; lead security investigations and incident response; proactively hunt for threats; build automation for detection and response; work with IT/Engineering to fix underlying problems; develop and test incident response playbooks; implement and enhance internal AI agents and security bots.
Seniority
Senior/Lead, hands-on IC with leadership responsibilities.
