Senior Threat Detection & Incident Response Engineer

Activision Blizzard, Inc.; United States; Remote; USD 124,000 - 229,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) with company match

Paid holidays & vacation

Job summary

Activision Blizzard, Inc. is seeking an Expert Detection and Response Engineer to defend players and platforms from advanced cyber threats. The role is hands-on, focusing on attacker behavior, rapid analysis, containment, and coordinated response across cloud, on-prem, and production environments.

The ideal candidate brings 10+ years in security, deep experience with SIEM/EDR, and strong scripting skills. Travel up to 10% may be required; excellent communication and collaboration are essential.

Qualifications

• Bachelor’s degree in computer science, Information Security, or equivalent practical experience.
• 10+ years of progressively accountable security experience, with incident response expertise.
• Hands-on threat detection, security operations, and incident response across the full lifecycle.

Responsibilities

• Detect, investigate, and respond to security incidents across cloud, corporate, and production environments as a hands-on member of the TDIR team.
• Monitor and analyze security telemetry and logs to identify anomalous activity and emerging threats.
• Perform alert triage, in-depth investigation, and forensic analysis from identification to containment and remediation.
• Develop and tune threat detections within SIEM/EDR; enable automation and AI-assisted triage where appropriate.
• Collaborate with engineering, leadership, and external vendors during investigations and response.

Skills

Threat detection

Security operations

Incident response

Log analysis

Scripting

SIEM/EDR

SOAR

English fluency

Education

Bachelor’s degree in computer science or Information Security

Tools

SIEM

EDR

SOAR

Python/PowerShell/KQL

Job description

Activision Blizzard, Inc. is seeking an Expert Detection and Response Engineer to defend players and platforms from advanced cyber threats. The role is hands-on, focusing on attacker behavior, rapid analysis, containment, and coordinated response across cloud, on-prem, and production environments.

The ideal candidate brings 10+ years in security, deep experience with SIEM/EDR, and strong scripting skills. Travel up to 10% may be required; excellent communication and collaboration are essential.