Lead Security Engineer - Detection & Response

Lockton Companies; Kansas City (MO); On-site; USD 110,000 - 160,000; Full time

Job summary

Lockton Companies seeks a Security Engineer - Detection & Response in Kansas City to lead security incidents from detection to recovery and to prevent future incidents through threat intelligence and hunting. The role also acts as the senior escalation point for the SOC and collaborates with cross-functional teams across regions.

The ideal candidate will be hands-on, with experience in MITRE ATT&CK, red/purple team exercises, and cloud security, and will help strengthen detections and runbooks

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
• Minimum 5 years of experience in information security with hands-on incident response, forensics, threat intelligence, hunting, or red team/pen testing.
• Relevant certifications such as GCIH, GCFA, GCTI, GREM, OSCP, CRTO, or CISSP are desirable.
• Strong knowledge of MITRE ATT&CK and applying it to threat hunting and detection.
• Hands-on experience with EDR and SIEM platforms (CrowdStrike, MS Defender XDR, MS Sentinel).
• Experience with scripting (PowerShell, Python, KQL) for automation and detection development.

Responsibilities

• Lead technical response to security incidents, coordinating with IT and business stakeholders.
• Perform digital forensics across endpoints, identity, email, and cloud environments.
• Conduct root cause analysis and update detections, controls, and playbooks.
• Plan and run tabletop exercises with technical and executive teams.

Skills

Incident response

Digital forensics

Threat intelligence

Threat hunting

Red team

Cloud security

Scripting

MITRE ATT&CK

EDR

SIEM

PowerShell

Python

KQL

Education

Bachelor's degree in CS/InfoSec

Tools

CrowdStrike Falcon

Microsoft Sentinel

Microsoft Defender XDR

SIEM platforms

Job description

Lockton Companies seeks a Security Engineer - Detection & Response in Kansas City to lead security incidents from detection to recovery and to prevent future incidents through threat intelligence and hunting. The role also acts as the senior escalation point for the SOC and collaborates with cross-functional teams across regions.

The ideal candidate will be hands-on, with experience in MITRE ATT&CK, red/purple team exercises, and cloud security, and will help strengthen detections and runbooks