Detection & Response Engineer: Security Automation Lead

remote work; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation and benefits

Mentorship from Lead

Learning and development opportunities

Job summary

Moniepoint Inc. is seeking an experienced Detection and Response Engineer to join the Incident Response team. You will lead investigations from start to finish, then translate learnings into improved detections and automation across Moniepoint Group.

You will triage security incidents, write and tune detection rules, and drive down MTTD/MTTR while collaborating with cross-functional teams and maturing IR capabilities.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent hands-on experience).
• 2–4 years of incident response, SOC operations, or detection engineering experience.
• Experience writing or tuning detection rules in a SIEM using YARA-L, CQL, KQL, or Sigma.
• Strong SIEM/EDR, log analysis, and end-to-end incident triage capabilities.
• Familiarity with MITRE ATT&CK and its mapping to detection coverage.
• Proficiency in Python, JavaScript, or similar scripting for automation.
• Strong written communication for incident reports and detection docs.

Responsibilities

• Own escalated security incidents end-to-end: scoping, evidence collection, threat analysis, containment, remediation.
• Analyze and reverse engineer malware; extract IOCs and map TTPs for detection.
• Threat hunting using existing content, threat intel, and hypothesis-driven analysis.
• Review and provide feedback on reported security incidents.
• Write, test, and deploy detection rules through CI/CD Detection-as-Code pipeline.
• Tune detections to reduce false positives using findings from investigations.
• Build and maintain SOAR playbooks and automated workflows for triage and response.
• Collaborate with cloud security, infra, and development teams; maintain playbooks and docs.

Skills

Incident response

SOC operations

Detection engineering

Threat hunting

YARA-L/CQL/KQL/Sigma

Python/Automation

MITRE ATT&CK

SIEM/EDR

Education

Bachelor's degree in Cybersecurity/CS/IT or equivalent

Tools

SIEM

EDR

Google SecOps

Job description

Moniepoint Inc. is seeking an experienced Detection and Response Engineer to join the Incident Response team. You will lead investigations from start to finish, then translate learnings into improved detections and automation across Moniepoint Group.

You will triage security incidents, write and tune detection rules, and drive down MTTD/MTTR while collaborating with cross-functional teams and maturing IR capabilities.