Senior Cyber Detection & Response Engineering Lead

Spyrosoft Ltd; United States; On-site; USD 150,000 - 210,000; Full time

Job summary

Spyrosoft Ltd seeks an experienced Cyber Detection & Response Engineering Lead Expert to design, implement, and continuously improve advanced security monitoring, detection engineering, and incident response across diverse environments.

You will lead security operations initiatives, guide multidisciplinary delivery teams, and drive SOC/CSIRT transformations while leveraging AI-enabled technologies to enhance threat detection and response with governance and validation.

Qualifications

• Extensive experience within Cyber Detection & Response, Security Operations, Incident Response, or related cybersecurity consulting services.
• Hands-on expertise across multiple CDR domains, including security monitoring, detection engineering, incident response, security automation, governance, and SOC or CSIRT transformation initiatives.
• Proven experience leading cybersecurity programs, projects, workstreams, or multidisciplinary delivery teams.
• Strong understanding of security operations processes, detection lifecycle management, security data management, and incident handling procedures.
• Ability to design end-to-end security solutions aligned with organizational objectives, operational requirements, and cyber risk considerations.
• Practical understanding of the application of AI within cybersecurity, including benefits, limitations, risks, governance requirements, validation processes, and responsible use.
• Experience supporting business development activities such as proposals, RFP responses, solution architecture, effort estimation, and client presentations.
• Excellent communication and stakeholder management skills, with the ability to engage effectively with both technical specialists and executive leadership.
• Strong analytical thinking, problem-solving capabilities, and a continuous improvement mindset.
• Professional proficiency in English (C1).

Responsibilities

• Design and deliver solutions across security monitoring, detection engineering, incident response, security operations, and security automation.
• Lead complex Cyber Detection & Response engagements and provide technical direction to multidisciplinary delivery teams.
• Assess existing SOC and CSIRT capabilities, identify improvement opportunities, and define target operating models and transformation roadmaps.
• Develop and enhance threat detection capabilities through detection use cases, correlation rules, monitoring strategies, and response procedures.
• Support the implementation, migration, integration, and optimization of SIEM, SOAR, EDR, XDR, and log management platforms.
• Apply AI-enabled cybersecurity capabilities to improve threat detection, alert triage, investigation processes, and security automation while ensuring proper validation, governance, and human oversight.
• Translate business objectives, operational challenges, and security risks into practical solution architectures and delivery plans.
• Facilitate workshops, technical discussions, and executive presentations for business and technical stakeholders.
• Provide mentorship and technical coaching to consultants and engineers, supporting their professional and technical development.
• Contribute to proposals, RFP responses, effort estimations, solution design activities, and client-facing discussions.
• Develop reusable methodologies, frameworks, accelerators, and service offerings that enhance delivery quality and consistency across projects.

Skills

Cyber Detection

Security Operations

Incident Response

Project leadership

Solution design

AI in security

Business development

Stakeholder management

Analytical thinking

English (C1)

Tools

KQL

SPL

SQL

Python

PowerShell

Job description

Spyrosoft Ltd seeks an experienced Cyber Detection & Response Engineering Lead Expert to design, implement, and continuously improve advanced security monitoring, detection engineering, and incident response across diverse environments.

You will lead security operations initiatives, guide multidisciplinary delivery teams, and drive SOC/CSIRT transformations while leveraging AI-enabled technologies to enhance threat detection and response with governance and validation.