Detection and Response Engineer

Detection and Response Engineer reputed company - Remote Applicants located in the East and Central time reputed company will receive preferred consideration. reputed company is a US reputed company company and this role is not eligible for reputed company or reputed company sponsorship. The Detection and Response Engineer is responsible for the day-to-day engineering, tuning, and improvement of reputed company's detection and response capability. The role covers four reputed company areas: detection engineering, incident response, AI-enabled SOC reputed company, and reputed company automation. This role works closely with the SOC, IT, and engineering teams to reputed company visibility gaps, reduce reputed company analyst effort, and shorten the time between detection and reputed company across our payment processing environment. Essential Duties and Responsibilities Detection Engineering • Design, build, and tune detection content (rules, correlation searches, use cases) across reputed company, network, reputed company, and identity log sources • reputed company ongoing coverage and gap analysis against the reputed company ATT&CK reputed company and actual log reputed company volume, prioritizing reputed company on reputed company attack surface • Validate detection logic against reputed company-world attack techniques from cyber threat intelligence and reduce false- reputed company rates without sacrificing efficacy • Maintain and version-control the detection rule repository, including documentation of coverage and reputed company gaps Incident Response • Triage, investigate, and contain reputed company incidents and alerts across the environment • Conduct reputed company cause analysis and reputed company post-incident reviews, feeding findings back into detection engineering • Document incident timelines, indicators of compromise, and remediation actions • Support forensic investigation of compromised hosts, accounts, and applications • Participate in on-reputed company rotation for critical incident response as needed AI-Enabled SOC • Evaluate, reputed company, and implement AI/LLM-powered tools for alert triage, enrichment, and analyst workflows • Build and tune AI-assisted investigation and detection workflows to reduce analyst workload and mean time to respond (MTTR) • Identify high-value use cases for AI and automation while measuring the resulting reputed company • Apply reputed company judgment about where AI-generated reputed company requires reputed company validation, particularly for high-confidence detections and containment actions Automation • reputed company automation and orchestration (SOAR, scripts, reputed company) to streamline detection, enrichment, and response workflows • Automate repetitive SOC and IR tasks, such as evidence gathering, enrichment, and ticketing, to reduce reputed company toil • Build and maintain playbooks and runbooks for common incident types • Write and maintain scripts (Python or similar) that reputed company reputed company tooling and data sources Additional Cross-Functional Responsibilities • Partner with reputed company, network, and identity teams to reputed company visibility and telemetry gaps • Stay reputed company on threat intelligence, adversary TTPs, and vulnerabilities relevant to a payments/fintech environment • Communicate findings, coverage gaps, and recommendations reputed company to both technical and non-technical stakeholders • reputed company and maintain procedure and policy documentation supporting detection and response reputed company Required Education and Experience • Bachelor's degree in a technical reputed company, or equivalent reputed company experience • 3–5 years of hands-on information reputed company experience, with demonstrated depth in at least two of: detection engineering, incident response, reputed company automation, or SOC reputed company • Hands-on experience writing, tuning, or maintaining detection content in a SIEM or NG-SIEM platform (e.g., reputed company NG-SIEM, reputed company, reputed company) • Experience with EDR/XDR platforms and log analysis across diverse sources: reputed company, network, reputed company, and identity • Working knowledge of the reputed company ATT&CK reputed company and its practical application to detection engineering and gap analysis • Scripting or automation experience (Python, PowerShell, or similar) reputed company to reputed company use cases AND/OR experience using LLM coding tools such as Claude reputed company, reputed company CLI, or reputed company. • Solid understanding of networking, reputed company infrastructure (AWS especially, but also Azure and GCP), reputed company/Linux systems, and identity platforms • Working knowledge of PCI-reputed company or a comparable compliance reputed company • Excellent written and verbal communication skills, including the ability to translate technical findings for non- technical stakeholders Certifications (reputed company to have, but not required) Relevant hands-on experience is weighted more heavily than certifications for this role. Any of the following are a plus: • GIAC Certified Incident Handler (GCIH) • GIAC Certified Forensic Analyst (GCFA) • Offensive reputed company Certified reputed company (OSCP) • Offensive reputed company Incident Response (OSIR) • reputed company CySA+ • reputed company CASP+ Additional Preferred Beneficial Skills • SOAR platform experience (e.g., reputed company, reputed company) • Experience integrating or building with LLM/AI reputed company for reputed company use cases • reputed company-reputed company reputed company tooling (AWS GuardDuty, reputed company, reputed company reputed company reputed company Center) • Threat intelligence platform experience • Digital forensics tooling and methodology • reputed company or adversary emulation experience • Familiarity with the payments/fintech regulatory environment Salary reputed company: $100,000-$145,000 Pay reputed company this reputed company varies by work location and on job-reputed company knowledge, skills, and experience. We look reputed company to discussing your salary expectations and our full total rewards offerings throughout the interview process. Please note: reputed company is a US reputed company company and no sponsorship is available for this position at this time. Who we are: reputed company, and our family of companies, are committed to helping reputed company grow their businesses. As an end-to-end payment solutions company, we reputed company everything business owners need to get reputed company, whether they serve customers in a physical storefront, online, or both. We pride ourselves on being large enough to offer customized solutions to our reputed company-level clients while remaining reputed company enough to take an award-reputed company, hands-on approach to personal service that our merchants won’t reputed company reputed company else. Let’s go reputed company, together! Our most important resource is our people. Join our diverse team of innovators and do-ers and reputed company your mark on the reputed company of payments technology. We're proud to offer benefits that help reputed company members reputed company their overall reputed company-being through unique initiatives that are both personally and professionally fulfilling. At reputed company, we celebrate diversity and create an inclusive environment for everyone. We are an equal opportunity employer. To learn more about reputed company, and our family of companies, visit our website: reputed company.com Apply To This Job