Incident Response & Detection Engineer — Onsite Miami

Cybersecurity Jobs; Miami (FL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Comprehensive health benefits

Paid time off

Life insurance

401(k) plan

Discretionary bonuses

Equity potential

Job summary

Blackstone is seeking an Alert, Detection, and Response Associate for onsite incident response and detection engineering in Miami, FL. You will manage incidents across email, endpoint, identity, network, and cloud, and own Tier 1 escalations.

The role requires hands-on SIEM and EDR experience, cloud/identity investigation skills, and strong scripting with Python or PowerShell. Onsite work in a fast-paced security operations center is expected.

Qualifications

• 2+ years in security operations, incident response, or equivalent security role.
• Experience running end-to-end investigations from alert to containment and resolution.
• Hands-on SIEM experience with native query languages (Splunk, KQL, Elastic).
• EDR experience: endpoint investigation and containment with leading EDR.

Responsibilities

• Manage incident queue from intake through investigation and closure.
• Own Tier 1 escalations and coordinate with other responders.
• Investigate security activity in SIEM and refine searches across telemetry.
• Perform endpoint live response and artifact collection.
• Investigate email threats including phishing and BEC.
• Use header and message trace analysis to map victims and remediation.
• Investigate cloud and identity compromise and MFA bypass.
• Expand detection/response coverage with AI tooling.
• Convert repeatable tasks into automation to reduce effort.

Skills

Incident response

SIEM analysis

EDR investigations

Python/PowerShell

Cloud security

Threat hunting

Technical writing

AI tooling usage

Office/investigation coordination

Education

B.S. in Computer Science, Cybersecurity, Information Systems, or related

Tools

Splunk/SPL

Microsoft Sentinel/KQL

Elastic

CrowdStrike

SentinelOne

Microsoft Defender for Endpoint

Okta/Microsoft Entra ID

Job description

Blackstone is seeking an Alert, Detection, and Response Associate for onsite incident response and detection engineering in Miami, FL. You will manage incidents across email, endpoint, identity, network, and cloud, and own Tier 1 escalations.

The role requires hands-on SIEM and EDR experience, cloud/identity investigation skills, and strong scripting with Python or PowerShell. Onsite work in a fast-paced security operations center is expected.