Remote Agentic Detection & Response Lead

Plain Concepts Group; Málaga; Remote; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Fully remote work (optional)

Flexible schedule 35 Hours / Week

Fully free health insurance

Job summary

Plain Concepts Group is seeking an experienced Agentic Detection & Response Specialist to lead complex investigations and build AI-assisted security operations. You will craft detections, automate responses, and guide teams across endpoints, identity, network and cloud environments.

The role emphasizes incident response, threat hunting, and detection engineering with hands‑on SIEM/EDR work and automation skills, while embracing AI-driven improvements and agentic security strategies.

Qualifications

• Experience in security operations and handling complex investigations.
• Strong incident response, threat hunting, and detection engineering background.
• Experience across endpoint, identity, network and cloud environments.

Responsibilities

• Lead complex investigations and advanced security escalations.
• Analyze activity across endpoints, identity, network, cloud and SIEM.
• Design and improve detection rules, queries and correlation logic.
• Develop automations, integrations and SOAR playbooks.
• Collaborate with architects to implement agentic security capabilities.
• Apply AI to investigations, enrichment, and response recommendations.
• Mentor L1/L2 analysts and improve escalation procedures.
• Reduce alert fatigue and improve detection quality.

Skills

SOC operations

L3 investigations

Incident response

Threat hunting

Detection engineering

Security operations

AI in security

Collaborative skills

Spanish & English fluency

Own initiatives

Tools

SIEM

EDR/XDR

KQL

SPL

Microsoft Sentinel

Microsoft Defender XDR

Python

PowerShell

APIs

SOAR

Job description

Plain Concepts Group is seeking an experienced Agentic Detection & Response Specialist to lead complex investigations and build AI-assisted security operations. You will craft detections, automate responses, and guide teams across endpoints, identity, network and cloud environments.

The role emphasizes incident response, threat hunting, and detection engineering with hands‑on SIEM/EDR work and automation skills, while embracing AI-driven improvements and agentic security strategies.