Detection & Response Engineer: Enablement & Hunting

Pro5.ai; Philippines; On-site; PHP 1,200,000 - 1,600,000; Full time

Job summary

Pro5.ai is seeking an experienced Detection & Response Engineer to join its Risk Operations team. This individual-contributor role blends security investigations, detection engineering, and platform enablement across SOC, Product, Engineering, CTI, GRC, and customer delivery teams.

You will turn validated investigative methods into reusable workflows, develop detection content, and collaborate to build scripts, API integrations, and workflow components.

Qualifications

• 5+ years of security experience, with at least 2 years building and tuning detection logic.
• Proficiency with CrowdStrike Falcon Next-Gen SIEM including CQL.
• Hands-on experience with Falcon Fusion SOAR workflows.
• Practical Python experience and REST/JSON skills.
• Familiarity with PowerShell and secure credential management.
• Knowledge of MITRE ATT&CK and Windows/Linux event data.
• Experience with version control, peer review, and regression testing.
• Strong investigation judgment and cross-functional collaboration.

Responsibilities

• Investigate security cases and perform threat hunts using CrowdStrike tools.
• Develop, test, deploy, tune, and maintain detection logic and dashboards.
• Build and maintain Falcon Fusion SOAR workflows and automation.
• Translate investigations into platform workflow specs and scripts.
• Collaborate with Product and Engineering on analyst-facing features.
• Validate telemetry coverage and troubleshoot parsing/normalization.
• Test detections against representative cases and monitor outcomes.
• Provide technical support and coaching to teams.

Skills

Security investigations

Threat hunting

Detection engineering

Python

PowerShell

REST APIs

JSON

Scripting

Cross-functional collaboration

Tools

CrowdStrike Falcon Next-Gen SIEM

CrowdStrike Falcon Fusion SOAR

FalconPy

Python

Git / Version control

Job description

Pro5.ai is seeking an experienced Detection & Response Engineer to join its Risk Operations team. This individual-contributor role blends security investigations, detection engineering, and platform enablement across SOC, Product, Engineering, CTI, GRC, and customer delivery teams.

You will turn validated investigative methods into reusable workflows, develop detection content, and collaborate to build scripts, API integrations, and workflow components.