Security Response Engineer — AI-Driven SecOps

Vertex Inc in; King of Prussia (PA); On-site; USD 91,000 - 119,000; Full time

Job summary

Vertex Inc. is seeking a Security Response Engineer to strengthen monitoring, incident response, detection engineering, and SecOps automation. This hands-on role requires working in a 24/7/365 rotating shift, including nights, weekends, and holidays.

You will monitor alerts across endpoints, identities, networks, and cloud services; lead end-to-end incident response; develop detection logic; and advance SecOps tooling. Strong scripting, cloud experience, and clear communication are essential.

Qualifications

• Hands‑on knowledge in security operations, incident response, detection engineering, or threat hunting, with demonstrated ability to lead significant investigations.
• Strong knowledge of attacker tactics and techniques across endpoint, identity, network, cloud, and email environments, including MITRE ATT&CK mapping and IOC analysis.
• Experience with SIEM platforms (Sentinel, Splunk, Chronicle, QRadar, or Elastic) and proficiency writing and tuning detection queries using KQL, SPL, Sigma, YARA, or equivalent.
• Experience with EDR/XDR platforms (Defender for Endpoint, CrowdStrike, SentinelOne, Cortex XDR, or Carbon Black), including triage, investigation, and containment.
• Scripting or automation experience using Python, PowerShell, or Bash; AI‑assisted development acceptable provided the candidate can explain, validate, test, and maintain the code.
• Practical use of AI tooling for securit y - such as Claude, GitHub Copilot, or OpenAI Codex - to accelerate tooling development, detection drafting, and analysis workflows.
• Experience with at least one cloud platform (AWS, Azure, GCP, or OCI), including cloud logging, identity, and security monitoring.
• Solid understanding of identity security, including MFA, conditional access, privileged access, token abuse, and identity‑based attacks.
• Strong communication skills with the ability to explain complex security issues to technical and non‑technical audiences.
• Independent, self‑starter, analytical, evidence‑driven work style with strong attention to detail.

Responsibilities

• Monitor, triage, investigate, and respond to security alerts across endpoint, identity, network, cloud, SaaS, and application environments.
• Lead end-to-end incident response - detection through containment, eradication, recovery, and post-incident improvement - including root-cause analysis and corrective action tracking.
• Build, tune, and maintain detection logic across SIEM, EDR, cloud, and network platforms; conduct proactive threat hunting aligned to MITRE ATT&CK.
• Develop and maintain SecOps tooling, scripts, API integrations, and workflow automations to improve investigation speed and response execution.
• Apply AI responsibly in SecOps workflows, with the ability to explain, validate , test, and maintain all AI-assisted outputs.
• Collaborate cross-functionally to close telemetry gaps, improve detection coverage, and translate incident findings into lasting security improvements.

Skills

Incident response

Threat hunting

SIEM tuning

EDR/XDR

Python/PowerShell

Cloud security

Identity security

Communication

AI tooling

Analytical thinking

Education

Bachelor's degree

Tools

SIEM

EDR/XDR tools

Job description

Vertex Inc. is seeking a Security Response Engineer to strengthen monitoring, incident response, detection engineering, and SecOps automation. This hands-on role requires working in a 24/7/365 rotating shift, including nights, weekends, and holidays.

You will monitor alerts across endpoints, identities, networks, and cloud services; lead end-to-end incident response; develop detection logic; and advance SecOps tooling. Strong scripting, cloud experience, and clear communication are essential.