Remote Agentic Detection & Response Specialist

Plain Concepts Group; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Fully remote work (optional)

Flexible schedule 35 Hours / Week

Flexible compensation (restaurant, <br

Job summary

Plain Security Studios is seeking an experienced Agentic Detection & Response Specialist to advance AI-driven investigations and automation within our SOC. You will lead complex incident investigations, design detection rules, develop SOAR playbooks, mentor L1/L2 analysts, and collaborate with architects to apply agentic security across endpoints, identities, networks, and cloud.

This role emphasizes reducing alert fatigue and integrating AI-assisted capabilities with Microsoft Sentinel and

Qualifications

• 6+ years of experience in Security Operations with L3 investigations.
• Strong background in Incident Response, Threat Hunting, Detection Engineering, and Security Operations.
• Experience investigating threats across endpoint, identity, network, and cloud environments.
• Hands-on experience with SIEM and EDR/XDR technologies.
• Strong query skills using KQL, SPL, or similar languages.
• Experience with Microsoft Sentinel, Microsoft Defender XDR, or equivalent security platforms.
• Scripting and automation experience with Python, PowerShell, APIs, or SOAR technologies.
• Interest in applying AI and Agentic Security concepts to real-world operations.
• Ability to own initiatives from idea to implementation and collaborate across technical teams.
• FluentSpanishandEnglish.

Responsibilities

• Lead complex incident investigations and advanced security escalations.
• Analyze activity across endpoint, identity, network, cloud, and SIEM to define scope and response.
• Design, build, and improve detection rules and investigation queries.
• Develop security automations and SOAR playbooks to streamline workflows.
• Collaborate with security architects to implement AI-assisted capabilities.
• Identify opportunities to apply AI for enrichment and response recommendations.
• Serve as technical reference for L1/L2 analysts to improve escalations.
• Drive initiatives to reduce alert fatigue and improve detection quality.
• 6+ years in SOC with experience managing L3 investigations.
• Strong background in IR, Threat Hunting, Detection Engineering, and SOC.
• Experience investigating threats across endpoints, identities, networks, and clouds.
• Hands-on with SIEM and EDR/XDR technologies.
• Strong query skills: KQL, SPL, or similar.
• Experience with MS Sentinel, Defender XDR, or equivalents.
• Scripting and automation with Python, PowerShell, APIs, or SOAR.
• Interest in AI and agentic security concepts.
• Ability to own initiatives from idea to implementation.
• Fluent in Spanish and English.

Skills

KQL

SPL

Python

PowerShell

APIs

SOAR

SIEM

EDR/XDR

Microsoft Sentinel

Microsoft Defender XDR

English & Spanish

Incident Response

Threat Hunting

Detection Engineering

Security Operations

AI-assisted security

Tools

Torq

Logic Apps

Azure Functions

Job description

Plain Security Studios is seeking an experienced Agentic Detection & Response Specialist to advance AI-driven investigations and automation within our SOC. You will lead complex incident investigations, design detection rules, develop SOAR playbooks, mentor L1/L2 analysts, and collaborate with architects to apply agentic security across endpoints, identities, networks, and cloud.

This role emphasizes reducing alert fatigue and integrating AI-assisted capabilities with Microsoft Sentinel and