Threat Detection & Incident Response Engineer (Hybrid)

CoStar Group; Virginia (MN); Hybrid; USD 90,000 - 154,000; Full time

Benefits offered by this job

Healthcare coverage

401K retirement plan

Tuition reimbursement

On-site fitness center

Job summary

CoStar Group seeks a Threat Detection Security Engineer to join our security program in the US. The role collaborates with the global threat center to strengthen detection, response, and defense across enterprise systems.

The ideal candidate balances strong communication with deep technical skills in incident response, cloud security, and automation. Position is based in Arlington, VA or Richmond, VA, with in-office work Monday–Thursday and remote on Fridays.

Qualifications

• Bachelor’s degree from an accredited university.
• 4+ years of hands-on security engineering experience.
• Excellent documentation and communication skills.
• Ability to identify opportunities for automation to increase detection and response efficacy.
• Experience with Microsoft/Azure security tooling.
• Experience in scripting with Python or a low-code automation solution.

Responsibilities

• Own cyber security incidents from identification to resolution.
• Record incidents and artifacts consistently and accurately.
• Collaborate with threat intelligence, detection engineering and security controls teams.
• Escalate for alert triage and guide investigation and resolution.
• Maintain the Incident Response Plan and procedures.
• Act as a security expert on MITRE ATT&CK and related attacker techniques.
• Execute threat hunts in the CoStar enterprise.
• Deliver training and quarterly tabletop exercises.
• Be a security advocate for incident response across the enterprise.
• Participate in 24x7 on-call rotation.

Skills

Security engineering

Incident response

Python scripting

Azure security tooling

MITRE ATT&CK

Documentation

Education

Bachelor’s Degree

Tools

Microsoft Defender

Microsoft Sentinel

EOP

Job description

CoStar Group seeks a Threat Detection Security Engineer to join our security program in the US. The role collaborates with the global threat center to strengthen detection, response, and defense across enterprise systems.

The ideal candidate balances strong communication with deep technical skills in incident response, cloud security, and automation. Position is based in Arlington, VA or Richmond, VA, with in-office work Monday–Thursday and remote on Fridays.