Incident Response Engineer: Microsoft Security & Detection

VideoRay; Dayton (OH); On-site; USD 112,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K with company matching

Paid holidays

Job summary

AeroVironment in Dayton, OH, is seeking a Cybersecurity Engineer to investigate and respond to incidents while engineering improvements to incident response capabilities. You will develop detections, response workflows, and security configurations to identify, contain, and recover from threats.

The ideal candidate has a strong Microsoft security background, hands-on security operations experience, and can translate lessons learned into measurable improvements.

Qualifications

• Three+ years in cybersecurity engineering, incident response, security operations, or related roles.
• Hands-on incident response in Microsoft-based enterprise environments.
• Experience with Microsoft Sentinel, Defender for Endpoint, and Defender XDR.
• Proficient in KQL for log analysis, threat hunting, and detections.
• Knowledge of Windows security, AD, Entra ID, M365, and Azure.

Responsibilities

• Investigate and respond to security incidents across endpoints, identities, email, cloud, and enterprise infra.
• Perform scoping, timeline reconstruction, root cause analysis, and impact assessments.
• Coordinate containment, eradication, and recovery with system owners.
• Develop and tune KQL queries, analytics rules, detections, and hunting queries.
• Improve security logging, data collection, and platform integrations.
• Develop and maintain incident response plans, playbooks, and runbooks.
• Lead or support post-incident reviews and track corrective actions.
• Identify recurring patterns and implement engineering changes.
• Partner with automation engineers to streamline alert enrichment and evidence collection.
• Produce incident reports detailing findings, impact, actions, and improvements.
• Conduct tabletop exercises to validate procedures and strengthen readiness.

Skills

Cybersecurity experience

Incident response

Microsoft security

KQL

Windows security

Communication

Organization

Education

Bachelor's degree

Tools

PowerShell

Python

Microsoft Sentinel

Defender for Endpoint

Defender XDR

Active Directory

Azure

Job description

AeroVironment in Dayton, OH, is seeking a Cybersecurity Engineer to investigate and respond to incidents while engineering improvements to incident response capabilities. You will develop detections, response workflows, and security configurations to identify, contain, and recover from threats.

The ideal candidate has a strong Microsoft security background, hands-on security operations experience, and can translate lessons learned into measurable improvements.