Senior Detection and Incident Response Lead (Remote)

InvestCloudOct2024; United States; Remote; USD 175,000 - 180,000; Full time

Job summary

InvestCloud is seeking a Senior Detection and Incident Response Engineer to own the CrowdStrike Falcon platform and drive end-to-end detection, containment, and remediation across the environment. You will lead incident response, coordinate with MDR partners, and guide teams in the U.S. and India.

The role requires 8+ years in detection engineering, strong scripting, and SIEM experience. Travel for on-call rotations may be involved, with a focus on rapid, precise disruption of threats while

Qualifications

• Eight or more years of detection engineering and incident response experience.
• Expert-level CrowdStrike Falcon administration including SOAR, Real Time Response, and APIs.
• Experience with MDR/XDR, MSSPs, and Windows/Linux log analysis.

Responsibilities

• Own CrowdStrike Falcon platform end to end, including policy, tuning, tagging, and workflows.
• Design detection coverage across endpoints, identity, cloud, network, and SaaS apps.
• Build automation that detects, contains, and remediates threats quickly.
• Lead technical incident response from first alert to closure with containment and evidence gathering.
• Manage MDR provider, tune detections, and ensure measurable service levels.
• Analyze system, firewall, identity, and app logs to find malicious activity.
• Write and test incident response playbooks and run exercises with teams.
• Lead and develop detection engineers in the U.S. and India and participate in on-call rotation.

Skills

Scripting (Python/PowerShell)

Incident response leadership

Threat detection

Communication with leadership

Tools

CrowdStrike Falcon

Splunk

Microsoft Sentinel

Job description

InvestCloud is seeking a Senior Detection and Incident Response Engineer to own the CrowdStrike Falcon platform and drive end-to-end detection, containment, and remediation across the environment. You will lead incident response, coordinate with MDR partners, and guide teams in the U.S. and India.

The role requires 8+ years in detection engineering, strong scripting, and SIEM experience. Travel for on-call rotations may be involved, with a focus on rapid, precise disruption of threats while