Senior Threat Detection & Incident Response Engineer

Visual Lease; Arlington (VA); On-site; USD 147,000 - 247,000; Full time

Benefits offered by this job

Healthcare coverage

401K retirement plan with matching

Employee stock purchase plan

Paid time off

Tuition reimbursement

On-site fitness center and wellness

Job summary

CoStar Group is seeking a Lead Detection and Response Security Engineer to oversee incident response across multiple business lines, mature incident response functions, and drive proactive threat hunting.

You will lead technical security assessments, coordinate tabletop exercises and develop automation to respond to threats, while mentoring teammates and collaborating with diverse groups. This role requires strong scripting skills and experience with Windows security tooling.

Qualifications

• Bachelor’s Degree from an accredited university.
• 8+ years in IT with 5+ years in cyber security.
• Scripting in Perl, Python, PowerShell.
• Experience with Windows Server 2012/2016/2019 and Active Directory.
• Security certifications such as CISSP, CISM, GIAC, GCIH, or CEIH.

Responsibilities

• Incident handling — oversee incident response activities across business verticals.
• Develop, mature and lead incident response functions and reporting.
• Lead security assessments for existing and acquired businesses.
• Facilitate quarterly incident response tabletop exercises.
• Team expert on Mitre ATT&ck and threat-hunting practices.
• Define platform automations to improve response efficiency.
• Coordinate security reviews of production environment permissions and network setup.
• Examine logs for trends and incidents; mentor others.

Skills

Scripting / programming proficiency

Communication skills

Education

Bachelor’s Degree

Security certifications (CISSP/CISM/GIAC/GCIH/CEIH)

Tools

Perl

Python

PowerShell

Windows Server

Active Directory

Mitre ATT&CK

Job description

CoStar Group is seeking a Lead Detection and Response Security Engineer to oversee incident response across multiple business lines, mature incident response functions, and drive proactive threat hunting.

You will lead technical security assessments, coordinate tabletop exercises and develop automation to respond to threats, while mentoring teammates and collaborating with diverse groups. This role requires strong scripting skills and experience with Windows security tooling.