Senior Threat Detection & Response Lead (AI-augmented SOC)

Insight Global; Wilmington (DE); On-site; USD 150,000 - 190,000; Full time

Job summary

Insight Global is seeking a hands-on Senior Threat Detection & Response Analyst to manage complex security incidents across endpoints, identity, email, network, cloud, and SaaS environments. You will work in an AI-augmented SOC, automate repetitive tasks, and mentor junior analysts.

The role requires 10+ years in cybersecurity with hands-on IR/IR experience, experience with CrowdStrike Falcon and Microsoft Defender XDR, and strong automation skills using Python/PowerShell.

Qualifications

• Minimum 10+ years in cybersecurity with hands-on SOC or IR experience in enterprise environments.
• Proven ability to manage complex incidents end-to-end (e.g., BEC, credential compromise, ransomware precursors).
• Strong investigation skills with CrowdStrike Falcon and/or Microsoft Defender XDR; hands-on with SIEMs.
• Experience with Azure/AWS security logs and cloud incident response.
• Proficient in automating tasks using Python/PowerShell and SOAR/Logic Apps.

Responsibilities

• Own complex security incidents end-to-end: triage, investigation, containment, eradication, recovery, and closure.
• Investigate threats across endpoint, identity, email, network, cloud, and SaaS to determine root cause and scope.
• Triage high-severity alerts from major security platforms and coordinate containment actions.
• Lead threat hunting using KQL and MITRE ATT&CK to improve detections and runbooks.
• Automate repetitive tasks with Python, PowerShell, SOAR playbooks, or AI-agent workflows.
• Mentor junior analysts and serve as escalation point for MDR/MSSP partners.
• Participate in on-call rotation for critical incidents.

Skills

Cybersecurity experience

Incident response

Threat detection

AI-assisted security tools

MITRE ATT&CK

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Azure/AWS security logs

Python automation

PowerShell automation

SOAR / Logic Apps

Job description

Insight Global is seeking a hands-on Senior Threat Detection & Response Analyst to manage complex security incidents across endpoints, identity, email, network, cloud, and SaaS environments. You will work in an AI-augmented SOC, automate repetitive tasks, and mentor junior analysts.

The role requires 10+ years in cybersecurity with hands-on IR/IR experience, experience with CrowdStrike Falcon and Microsoft Defender XDR, and strong automation skills using Python/PowerShell.