Staff Incident Response Engineer

📋 Description

• Design, implement, and maintain detections across SIEM, EDR, and cloud.
• Lead detection strategy and architecture aligned with Detection Quality frameworks.
• Write high-fidelity rules with SIGMA and YARA-L.
• Co-lead threat hunting and scale security operations.

🎯 Requirements

• 7+ years in security operations; 3+ years in detection engineering.
• Deep expertise creating high-fidelity rules: SIGMA, YARA-L, KQL, SPL.
• Proven ability to detect across SIEM, EDR, and cloud; MITRE ATT&CK aligned.
• SOAR platforms (Tines, Splunk SOAR, Cortex XSOAR) expert.
• Python for API integrations and automation.
• Strong threat hunting methodology; lead or co-lead campaigns.

🎁 Benefits

• High-impact leadership role.
• Greenfield SOAR platform and major SIEM migrations.
• Autonomy and influence in security architecture.
• Growth opportunities and clear trajectory.
• Innovation culture and automation-first security.