Senior Security Detection & Response Engineer

Lockton; Kansas City (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

Lockton's Global Security Operations team seeks a Security Engineer - Detection & Response to lead technical response during incidents and to develop detections and playbooks through threat intelligence, red/purple team exercises, and ongoing hunting.

The role emphasizes hands-on incident leadership, collaboration with IT and legal, and mentoring the SOC; requires 5+ years in info security and certifications; strong knowledge of MITRE ATT&CK; experience with CrowdStrike Falcon and Microsoft

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5+ years of experience in information security with hands-on incident response, digital forensics, CTI, threat hunting, or red team.
• Certifications such as GCIH, GCFA, GCTI, GREM, OSCP, CRTO, or CISSP are desirable.
• Working knowledge of MITRE ATT&CK and its application to threat hunting and detection.
• Hands-on experience with EDR and SIEM platforms (CrowdStrike Falcon, Microsoft Defender XDR, etc.).
• Strong Windows/Microsoft ecosystem knowledge including Active Directory and Entra ID attack paths.
• Scripting: PowerShell, Python, KQL.
• Experience with adversary emulation tooling (Atomic Red Team, MITRE Caldera) and safe testing in prod.
• Excellent problem-solving and communication skills; team collaboration.
• Willingness to stay current with attacker tradecraft and AI-enabled threats.

Responsibilities

• Incident Leadership: lead the technical response to security incidents and coordinate with IT, Legal, HR, and others.
• Forensic Analysis: conduct investigations across endpoint, identity, email, and cloud.
• Root Cause & Lessons Learned: perform RCAs and implement changes to detections and playbooks.
• Readiness: maintain incident response playbooks and run tabletop exercises with technical and exec audiences across regions.
• Threat Hunting: lead intelligence-driven hunts across endpoints, identity, cloud, and SaaS telemetry.

Skills

Incident response

Digital forensics

Threat hunting

Cyber threat intelligence

Adversary emulation

MITRE ATT&CK

EDR

SIEM

PowerShell

Python

Cloud security

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Microsoft Sentinel

Atomic Red Team

Caldera

Job description

Lockton's Global Security Operations team seeks a Security Engineer - Detection & Response to lead technical response during incidents and to develop detections and playbooks through threat intelligence, red/purple team exercises, and ongoing hunting.

The role emphasizes hands-on incident leadership, collaboration with IT and legal, and mentoring the SOC; requires 5+ years in info security and certifications; strong knowledge of MITRE ATT&CK; experience with CrowdStrike Falcon and Microsoft