Cyber Detection & Response Engineering Lead Expert
Full-time
Worldwide
Oct 29, 2026
RemoteMatch analyzes your experience against this role's specific tech stack, timezone overlap, and requirements.
About the Role
Tech Stack: Security Operations & Detection SIEM: Microsoft Sentinel, Splunk, IBM QRadar, ArcSight or similar SOAR platforms EDR & XDR technologies Threat detection & monitoring solutions Log management & security analytics platforms Cloud Security Microsoft Azure, AWS, GCP Cloud-native security monitoring solutions Frameworks & Methodologies MITRE ATT&CK NIST Cybersecurity Framework (NIST CSF) Incident Response methodologies SOC & CSIRT operating models Scripting & Query Languages KQL, SPL, SQL, Python, PowerShell Other automation and scripting technologies Required Qualifications: Extensive experience within Cyber Detection & Response, Security Operations, Incident Response, or related cybersecurity consulting services. Hands-on expertise across multiple CDR domains, including security monitoring, detection engineering, incident response, security automation, governance, and SOC or CSIRT transformation initiatives. Proven experience leading cybersecurity programs, projects, workstreams, or multidisciplinary delivery teams. Strong understanding of security operations processes, detection lifecycle management, security data management, and incident handling procedures. Ability to design end-to-end security solutions aligned with organizational objectives, operational requirements, and cyber risk considerations. Practical understanding of the application of AI within cybersecurity, including benefits, limitations, risks, governance requireme