Remote Detection & Response Engineer - AI-Driven SOC

North; United States; On-site; USD 100,000 - 145,000; Full time

Job summary

North is seeking a Detection and Response Engineer for a remote role in the United States. You will design, tune, and maintain detection content across endpoints, network, cloud, and identity sources, while leading incident response and AI-assisted SOC initiatives.

The position emphasizes automation, collaboration with IT and engineering, and strong communication with stakeholders. Required are 3–5 years in information security with hands-on SIEM experience, scripting ability

Qualifications

• Bachelor's degree in a technical field or equivalent professional experience.
• 3–5 years of hands-on information security experience with depth in at least two areas (detection engineering, incident response, security automation, or SOC operations).
• Hands-on experience writing, tuning, or maintaining detection content in a SIEM/NG-SIEM (e.g., CrowdStrike NG-SIEM, Splunk, Microsoft Sentinel).
• Experience with EDR/XDR platforms and log analysis across endpoint, network, cloud, and identity sources.
• Working knowledge of the MITRE ATT&CK framework and its practical application to detection engineering and gap analysis.
• Scripting or automation experience (Python, PowerShell) and/or experience using LLM coding tools.
• Strong understanding of networking, cloud (AWS preferred), Windows/Linux, and identity platforms.
• Working knowledge of PCI-DSS or comparable framework.
• Excellent written and verbal communication skills.

Responsibilities

• Design, build, and tune detection content across endpoint, network, cloud, and identity sources.
• Triage, investigate, and contain security incidents and alerts; conduct root cause analysis.
• Evaluate and pilot AI/LLM-powered tools for alert triage, enrichment, and workflows.
• Develop automation and SOAR scripts to streamline detection, enrichment, and response.
• Collaborate with cloud, network, and identity teams to close telemetry gaps; communicate findings clearly.

Skills

SIEM tuning

Incident response

Scripting (Python/PowerShell)

AI/LLM tooling

Cloud security (AWS/Azure/GCP)

EDR/XDR platforms

MITRE ATT&CK

Communication

On-call readiness

Education

Bachelor's degree in technical field

Tools

CrowdStrike NG-SIEM

Splunk

Microsoft Sentinel

Python

PowerShell

LLM tools (Claude Code, Gemini CLI, Codex)

Job description

North is seeking a Detection and Response Engineer for a remote role in the United States. You will design, tune, and maintain detection content across endpoints, network, cloud, and identity sources, while leading incident response and AI-assisted SOC initiatives.

The position emphasizes automation, collaboration with IT and engineering, and strong communication with stakeholders. Required are 3–5 years in information security with hands-on SIEM experience, scripting ability