Senior Security Engineer- Detection & Response

Glocomms; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Glocomms in New York City partners with a global quantitative investment firm to hire a Senior Security Engineer focused on detection and response. You will monitor alerts, lead incident response, and enhance security monitoring across cloud and on-prem environments.

The role requires 5+ years in information security with expertise in detection, response, and automation. Strong communication and collaboration skills are essential for success.

Qualifications

• Minimum of 5 years in information security with 3+ years on detection and response.
• Proven ability to develop and implement custom detection use cases.
• Hands-on incident response and digital forensics experience.
• Experience with SIEM, threat intel, and security automation.
• Strong understanding of attacker TTPs and network/OS fundamentals.
• Experience across cloud and on-prem environments; scripting a plus.

Responsibilities

• Monitor security alerts across multiple systems to identify threats.
• Lead incident response including investigation, containment, remediation and recovery.
• Configure and tune security monitoring tools and detection rules.
• Design detection logic to improve threat visibility.
• Collaborate to onboard data sources, enrich telemetry, and develop playbooks.
• Perform proactive threat hunting based on intelligence and trends.
• Engage with external providers and partners as needed.
• Contribute to long-term improvements in detection and response maturity.

Skills

Incident response

Digital forensics

SIEM

Threat intelligence

Automation / scripting

DevOps practices

Python

PowerShell

Bash

Networking fundamentals

Cloud & on‑prem

Stakeholder communication

Threat hunting

Tools

SIEM platforms

Threat intel solutions

Security automation

Job description

Glocomms is partnering with a global quantitative investment firm in NYC to hire a Senior Security Engineer focused on detection and response.

Key Responsibilities

• Monitor and evaluate security alerts and events across multiple systems and data sources to identify potential threats.
• Lead and coordinate incident response efforts, including investigation, containment, remediation, recovery, and post-incident analysis.
• Configure, maintain, and enhance security monitoring and response technologies, including detection rules and system tuning.
• Design and implement high-quality detection logic across security platforms to improve threat visibility.
• Work collaboratively with internal teams to strengthen detection capabilities, including onboarding new data sources, enriching telemetry, and developing use cases, playbooks, and automated response workflows.
• Conduct proactive threat hunting activities based on intelligence insights and emerging threat patterns.
• Engage with external service providers, partners, and third-party stakeholders as needed.
• Contribute to long-term improvements in detection and response maturity through strategic planning and process enhancement.

Required Experience & Skills

• Minimum of 5 years of experience in information security, with at least 3 years focused on detection and response functions.
• Proven ability to develop and implement custom detection use cases.
• Hands-on experience with incident response and digital forensics analysis.
• Experience deploying, optimizing, and supporting security tools such as SIEM platforms, threat intelligence solutions, and security automation technologies.
• Strong understanding of attacker behavior, including tactics, techniques, and procedures (TTPs).
• Solid technical foundation in networking concepts and operating systems.
• Experience working in environments that span both cloud and on-premises infrastructure across diverse operating systems.
• Familiarity with automation, CI/CD pipelines, or DevOps practices is beneficial.
• Working knowledge of scripting or programming languages such as Python, Bash, or PowerShell is a plus.
• Strong written and verbal communication skills, with the ability to effectively engage stakeholders at various levels.
• Self-driven approach with a focus on continuous improvement, efficiency, and automation.