← All jobs
Detection & Response Engineer
Remote job · Remote · fulltime_permanent · Engineering
Apply well, not just fast
Create a free account and upload your resume to get a match score, keyword gaps, a tailored resume, a cover letter and interview prep for this job.
About the role
SIEM
At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking a Detection & Response Engineer to join one of our clients' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.
Key Responsibilities:
- Investigate security cases and targeted hunts using CrowdStrike Falcon Next-Gen SIEM and CQL; correlate telemetry, assess scope and impact, document findings, and recommend appropriate actions.
- Develop, test, deploy, tune, and maintain detection logic, queries, dashboards, analyst guides, and version-controlled detection content.
- Build and maintain Falcon Fusion SOAR workflows for enrichment, evidence capture, routing, escalation, and authorized response.
- Validate telemetry coverage and quality; troubleshoot parsing, normalization, mapping, and source-data issues.
- Translate validated investigations into platform workflow specifications and co-build scripts, API integrations, workflow components, and prototypes with Product and Engineering.
- Test workflows and detections against representative cases; monitor outcomes, exceptions, and production feedback, and document ownership and support handoffs.
- Provide technical support, troubleshooting, knowledge transfer, and coaching; coordinate assigned analysis and platform work.