Senior Security Engineer, Detection & Response (SOC)

About the role

Detection and response work sits with this person: tuning what the SIEM catches, leading incident response, running threat hunts and growing forensics. The program is early and the hire shapes how it measures and grows.

At a glance

What you will do

• Own monitoring and triage of SIEM alerts, tuning detection content and closing coverage gaps
• Lead threat hunting for activity that automated detection misses
• Drive automation for alerting, enrichment and triage to cut manual work
• Lead incident response and write clear post-incident reviews with tracked actions

What they look for

• Experience taking a SOC or IR function from early stage to production ready
• Five or more years in SOC, incident response or detection engineering, beyond queue work
• Hands-on SIEM work: log ingestion, correlation rules, detection tuning
• Forensic analysis and evidence handling across hosts and cloud environments
• Scripting for triage and response, in Python or similar

Nice to have

• Familiarity with AWS, GCP or Azure and common attacker techniques mapped to MITRE ATT&CK