Senior Incident Response Engineer – Hybrid (Cloud & Forensics)

Watts Water Technologies; Massachusetts; Hybrid; USD 152,000 - 168,000; Full time

Benefits offered by this job

Medical and dental coverage

Retirement benefits

Paid holidays

Paid time off

Education reimbursement

Employee discounts

Job summary

Watts Water Technologies is seeking a Senior Incident Response Engineer to lead complex investigations end-to-end across cloud and on-prem environments. You will tune detections in CrowdStrike Falcon, coordinate with NG SIEM MDR, and drive improvements in incident response playbooks.

The role requires deep technical expertise in forensics, identity, network and cloud investigations, with a focus on reducing dwell time and improving detection quality in a hybrid North Andover, MA setting.

Qualifications

• Bachelor's degree in cybersecurity or related field; or equivalent experience.
• 5+ years hands-on incident response or security operations.
• Experience investigating cloud compromise in AWS/Azure/GCP environments.
• Experience with EDR technologies, including detection engineering and alert tuning.
• Familiarity with MITRE ATT&CK and incident response frameworks.

Responsibilities

• Lead complex security investigations end-to-end from escalation to closure.
• Investigate cloud application compromise and privilege escalation across environments.
• Develop and tune detection content to reduce false positives.
• Serve as technical liaison to MDR/NG SIEM providers and partners.
• Develop incident response playbooks and runbooks for repeatable cases.

Skills

Incident response

Cloud security

EDR/Tuning

Forensics

MDR/Managed security

MITRE ATT&CK

Education

Bachelor's degree in cybersecurity

Tools

CrowdStrike Falcon

NG SIEM MDR

Entra ID

Active Directory

Job description

Watts Water Technologies is seeking a Senior Incident Response Engineer to lead complex investigations end-to-end across cloud and on-prem environments. You will tune detections in CrowdStrike Falcon, coordinate with NG SIEM MDR, and drive improvements in incident response playbooks.

The role requires deep technical expertise in forensics, identity, network and cloud investigations, with a focus on reducing dwell time and improving detection quality in a hybrid North Andover, MA setting.