Remote Cybersecurity Engineer: Detection & Incident Lead

Talent Acquisition Team; Indianapolis (IN); Remote; USD 113,000 - 138,000; Full time

Job summary

Herff Jones is seeking a Cybersecurity Engineer to own the security tooling stack, tune platforms, and turn threat intelligence into detections. You will serve as a primary responder for major incidents and drive security projects across data protection, IAM hardening, and cloud security.

The role requires 5+ years in security engineering or detection, a Bachelor's in a related field, and the ability to work remotely from the United States.

Qualifications

• Hands-on production experience with enterprise XDR/EDR and IAM.
• Experience with SIEM/XDR query languages (KQL, SPL) and automation.
• Proven incident response experience and knowledge of NIST SP 800-61 and MITRE ATT&CK.
• Technical leadership and mentoring experience.

Responsibilities

• Own security tooling stack and detection engineering, tuning platforms and detections.
• Lead incident response during Priority 1–2 incidents and support SOC with alerts.
• Lead security roadmap initiatives across data protection, IAM hardening, and cloud security.
• Create runbooks, design changes, and ensure PCI DSS controls with evidence.

Skills

XDR/EDR

IAM

Endpoint management

SIEM/XDR query languages

PowerShell

Python

Incident response

Technical leadership

Education

Bachelor's degree in Computer Science/Info Security

Tools

MDR tooling

Endpoint management platforms

SIEM platforms

Job description

Herff Jones is seeking a Cybersecurity Engineer to own the security tooling stack, tune platforms, and turn threat intelligence into detections. You will serve as a primary responder for major incidents and drive security projects across data protection, IAM hardening, and cloud security.

The role requires 5+ years in security engineering or detection, a Bachelor's in a related field, and the ability to work remotely from the United States.