Senior Detection & Response Engineer

DEMONWARE (CANADA) , INC.; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Activision is seeking an Expert Detection and Response Engineer to protect players, studios, platforms, and enterprise environments from advanced cyber threats. This role is hands-on within Global Security Operations, focusing on real-world attacker behavior, rapid analysis, and effective containment.

The successful candidate will detect, investigate, and respond to incidents across cloud, corporate, and production environments, leveraging SIEM/EDR, scripting, and SOAR to accelerate

Qualifications

• Bachelor’s degree in computer science, information security, or equivalent practical experience.
• 10+ years of progressively accountable security experience, with independent incident response judgment.
• Hands-on threat detection, security operations, and incident response across full lifecycle.
• Strong understanding of modern threat landscape, attacker TTPs.
• Experience with log analysis, correlation, and investigative triage.
• Excellent written and verbal communication, ability to convey findings clearly.
• Willingness to participate in on-call rotations.
• Experience with security monitoring platforms (SIEM/EDR) and building detection content.
• Scripting or programming experience (Python, PowerShell, KQL).
• Host- and network-based forensic skills including timeline reconstruction.
• Knowledge of applying LLMs to security operations and associated failure modes.
• English fluency.

Responsibilities

• Detect, investigate, and respond to security incidents across cloud, corporate, and production environments.
• Monitor and analyze telemetry and logs to identify anomalies and threats.
• Perform alert triage, in-depth investigation, and forensic analysis across incident lifecycle.
• Execute endpoint, identity, cloud, and malware investigations with timeline reconstruction.
• Develop and tune threat detections within SIEM based on attacker behavior.
• Advance investigation efficiency through automation, SOAR workflows, and scripting.
• Design or operate AI-assisted triage and enrichment workflows to speed investigations.
• Evaluate AI tooling for adversarial risks and constrained output schemas.
• Contribute to TDIR procedures, playbooks, and operational metrics.
• Collaborate with engineering, stakeholders, and vendors during investigations.
• Participate in on-call rotations and provide off-hours support.
• Communicate findings clearly to technical teams and leadership.
• Occasional travel up to ~10%.

Skills

Threat detection

Incident response

Scripting

Python

PowerShell

KQL

SOAR

EDR

SIEM

English fluency

Education

Bachelor’s degree in CS/Info Sec

Tools

SIEM

EDR

SOAR

Case management

Job description

Activision is seeking an Expert Detection and Response Engineer to protect players, studios, platforms, and enterprise environments from advanced cyber threats. This role is hands-on within Global Security Operations, focusing on real-world attacker behavior, rapid analysis, and effective containment.

The successful candidate will detect, investigate, and respond to incidents across cloud, corporate, and production environments, leveraging SIEM/EDR, scripting, and SOAR to accelerate