Senior Security Engineer, Incident Response

Responsibilities

• Act as the primary Incident Lead during high-severity events, owning triage, containment, and root-cause analysis
• Build and design automation workflows using Tines to reduce operational toil
• Manage and fine-tune detection rule lifecycles using CrowdStrike EDR and SIEM/SOAR capabilities
• Monitor and respond to data risks across endpoints, identity, and SaaS applications using Cyberhaven DLP
• Partner with infrastructure owners to ensure cloud environments have proper telemetry, encryption, and response playbooks
• Participate in the scheduled Incident Response on-call rotation

Requirements

• 5+ years of experience in Incident Response, SOC, or Security Engineering
• Proven track record of leading high-severity incident containment
• Strong familiarity with the MITRE ATT&CK framework and modern adversary TTPs
• Experience managing and tuning detection logic within CrowdStrike Falcon or equivalent EDR/XDR
• Excellent leadership and communication skills to coordinate cross-functional teams under pressure