Remote Senior Detection & Incident Response Engineer

Investcloud,-Inc; United States; Remote; USD 175,000 - 180,000; Full time

Job summary

InvestCloud is seeking a Senior Detection and Incident Response Engineer to own CrowdStrike Falcon, design logging and monitoring, and build automation that detects, contains, and remediates threats at machine speed without disrupting the business.

You will lead the incident response across the US and international teams, mentor engineers, and collaborate with security partners to ensure rapid, precise actions and clear leadership updates.

Qualifications

• Eight or more years in detection engineering and incident response.
• Expert CrowdStrike Falcon administration including SOAR and Real Time Response.
• Experience with MDR, XDR, MSSPs, and cloud/audit logs.
• Strong scripting in Python/PowerShell and API automation.
• Experience with SIEM platforms like Falcon Next-Gen SIEM, Splunk or Sentinel.
• Knowledge of MITRE ATT&CK mapping for detection coverage.

Responsibilities

• Own the CrowdStrike Falcon platform end to end and tune detections.
• Design detection coverage across endpoints, identity, cloud, network, and SaaS.
• Build automation to detect, contain, and remediate threats quickly.
• Lead incident response from first alert to closure with stakeholders.
• Coordinate with MDR partner and ensure measurable service levels.
• Analyze logs to identify malicious activity and refine playbooks.
• Write/test incident response playbooks and run drills with teams.
• Mentor detection engineers in the US and India and participate in on-call.

Skills

Python scripting

PowerShell

SOAR workflows

Incident response leadership

MDR / XDR

Log analysis

Tools

CrowdStrike Falcon

Splunk

Microsoft Sentinel

PowerShell/Automation

Job description

InvestCloud is seeking a Senior Detection and Incident Response Engineer to own CrowdStrike Falcon, design logging and monitoring, and build automation that detects, contains, and remediates threats at machine speed without disrupting the business.

You will lead the incident response across the US and international teams, mentor engineers, and collaborate with security partners to ensure rapid, precise actions and clear leadership updates.