Senior Detection & Response Engineer (IR Expert)

Activision Blizzard, Inc.; California City (CA); On-site; USD 124,000 - 229,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

Paid holidays and vacation

Tuition reimbursement

Job summary

Activision Blizzard, Inc. is seeking an Expert Detection and Response Engineer to protect players and studios across cloud, enterprise, and production environments.

The role emphasizes hands-on threat detection, rapid analysis, and effective containment within the Global Security Operations team. You will investigate, triage, and respond to security incidents, develop detections, and automate workflows using SOAR and AI-assisted tooling.

Qualifications

• Bachelor’s degree in computer science, Information Security, or equivalent practical experience.
• 10+ years of security incident response experience.
• Hands-on threat detection, security operations, and incident response across the full lifecycle.
• Experience with SIEM/EDR and building or extending detections.
• Scripting or programming in Python/PowerShell/KQL.
• Fluency in English.
• Willingness to participate in an on-call rotation.

Responsibilities

• Detect, investigate, and respond to security incidents across cloud, corporate, and production environments as a hands-on member of the TDIR team.
• Monitor and analyze security telemetry and logs to identify anomalous activity and emerging threats.
• Perform alert triage, in-depth investigation, and forensic analysis across the incident lifecycle.
• Develop, tune, and extend threat detections within the SIEM based on attacker behavior.
• Automate investigations and response workflows with SOAR and scripting.
• Collaborate with engineering, vendors, and leadership during investigations and incidents.
• Occasional travel up to 10% for on-site incident response.

Job description

Activision Blizzard, Inc. is seeking an Expert Detection and Response Engineer to protect players and studios across cloud, enterprise, and production environments.

The role emphasizes hands-on threat detection, rapid analysis, and effective containment within the Global Security Operations team. You will investigate, triage, and respond to security incidents, develop detections, and automate workflows using SOAR and AI-assisted tooling.