Detection & Response Engineering Lead

InfraTech Solutions LLC; Chicago (IL); Hybrid; USD 150,000 - 180,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

Parental leave

401(k) with employer matching

Continuous training allowances

Job summary

InfraTech Solutions LLC in Chicago, IL is seeking a Detection & Response Engineering Manager to build and lead a modern threat detection and incident handling practice. You will mentor an engineering team while maturing security operations across multi-cloud, endpoints, and SaaS environments.

The role emphasizes automation, detection-as-code, AI integrations, and measuring program maturity with MTTR and coverage, reporting to senior IT and security executives.

Qualifications

• 7+ years of hands-on experience in security operations, threat detection engineering, or incident response.
• Ability to translate roadmaps into concrete deliverables and mentor technical team members.
• Strong capability to author custom scripts and build detection logic using code-based frameworks.
• Track record of taking security tools and architecture from initial design to full production deployment.
• Technical expertise with modern cloud SIEM/SOAR platforms and telemetry collection from AWS environments.

Responsibilities

• Direct security monitoring, threat triage, and incident handling operations across multi-cloud infrastructure, endpoint assets, and SaaS environments.
• Serve as operational escalation lead during security incidents and participate in the team’s on-call rotation.
• Oversee the end-to-end detection engineering lifecycle—authoring, tuning, and decommissioning rules mapped against the MITRE ATT&CK framework to minimize false positives.
• Manage security data pipelines, ensuring proper ingestion, normalization, enrichment, and API-based telemetry routing.
• Champion detection-as-code principles by shifting rules into version-controlled repositories backed by peer review and automated testing.
• Design, architect, and deploy net-new detection platforms and response tools from initial proof-of-concept through production rollout.
• Integrate automation and generative AI into security operations center workflows to streamline alert processing, orchestration, and triage.
• Present metrics regarding incident trends, detection coverage, and overall program maturity to senior IT and security executives.

Skills

Security operations

Threat detection engineering

Incident response

Scripting / coding for detection

MTTR KPI tracking

Tools

Cloud SIEM/SOAR platforms

AWS telemetry collection

Job description

InfraTech Solutions LLC in Chicago, IL is seeking a Detection & Response Engineering Manager to build and lead a modern threat detection and incident handling practice. You will mentor an engineering team while maturing security operations across multi-cloud, endpoints, and SaaS environments.

The role emphasizes automation, detection-as-code, AI integrations, and measuring program maturity with MTTR and coverage, reporting to senior IT and security executives.