Senior Detection & Response Lead – Cloud & IR

ISC (Integrated Specialty Coverages, LLC); United States; Hybrid; USD 160,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental and vision insurance

401(k) with company match

Work from home stipend

Job summary

Integrated Specialty Coverages, LLC (ISC) is seeking a senior, hands-on defender to build a detection and response function across AWS and enterprise environments. You will report to the CISO and partner with MSSP and MDR partners to mature detection and response capabilities.

The role emphasizes detection engineering, advanced investigation, threat hunting, and ownership of incident response. On-call availability for high‑severity incidents is required.

Qualifications

• 7+ years of hands-on cybersecurity operations experience.
• Experience leading complex investigations in cloud and on‑premise environments.
• Strong knowledge of attacker TTPs and log correlation.
• Ability to interpret MDR escalations and drive containment actions.
• Experience with AWS and Azure security logs and containment measures.
• Excellent written and verbal communication for technical and non‑technical audiences.

Responsibilities

• Lead incident response for escalated MSSP/MDR alerts across cloud and endpoint environments.
• Perform forensic review, log correlation, and attacker technique identification.
• Provide clear incident findings, timelines and remediation steps to stakeholders.
• Conduct hypothesis-driven and data-driven threat hunts to find hidden activity.
• Drive improvements in detection coverage and reduce mean‑time‑to‑detect.

Skills

Cybersecurity operations

Incident response

Threat detection

Cloud security

MITRE ATT&CK

Digital forensics

AWS/Azure logs

MDR/MSSP collaboration

Log analysis

Team leadership

Education

Bachelor's in Computer Science or Cybersecurity

Tools

SIEM

EDR

Proxy

WAF

DLP

CloudTrail

CloudWatch

IAM

Job description

Integrated Specialty Coverages, LLC (ISC) is seeking a senior, hands-on defender to build a detection and response function across AWS and enterprise environments. You will report to the CISO and partner with MSSP and MDR partners to mature detection and response capabilities.

The role emphasizes detection engineering, advanced investigation, threat hunting, and ownership of incident response. On-call availability for high‑severity incidents is required.