Senior/Lead Security Engineer (Detection & Response)
Core
Build next-generation detection systems, own security monitoring and detection end-to-end, lead investigations and incident response, and automate security workflows using AI.
Role type
Senior/Lead Security Engineer (Detection & Response)
Builds
Security monitoring pipelines, detection workflows, automated response playbooks, and AI-assisted security agents.
Domain
Cloud security (AWS), IT infrastructure, and energy sector.
Deliverable
production ML models
Required skills
Detection engineering, incident response, threat hunting, cloud security monitoring, networking fundamentals, attacker tradecraft, scripting/programming (Python), automation, SIEM/EDR/SOAR tooling, systems thinking.
Preferred skills
AWS security telemetry (CloudTrail, GuardDuty, VPC Flow Logs, IAM), detection-as-code (Sigma, Git-based), EDR (CrowdStrike, SentinelOne, Defender), network security monitoring (PCAP, NetFlow/sFlow), digital forensics, threat intelligence, purple teaming, data centre security, AI/LLMs in security operations.
Responsibilities
Own security monitoring and detection across AWS, identity, endpoints, SaaS, networks, and data centers; build and maintain telemetry/logging pipelines; lead security investigations and incident response; proactively hunt for threats; build automation for detection and response; work with IT/Engineering to fix underlying issues; develop and test incident response playbooks; implement and enhance internal AI agents and security bots.
Seniority
Senior/Lead, hands-on IC with leadership responsibilities.
