Senior CSIRT Engineer

Job Summary

Owning the SIEM and EDR platforms, the full-time Senior CSIRT Engineer will administer, optimize, and build detection content while designing automation workflows and supporting incident response efforts in a remote environment.

Key Responsibilities

• Engineer, tune, and maintain detection rules and analytics in the SIEM and EDR platforms
• Design and build SOAR playbooks and automated response workflows to streamline triage and containment
• Assist with investigation of security events and conduct threat hunts across organizational telemetry

Required Qualifications

• Minimum of 5 years experience in detection engineering, SIEM engineering, or a closely related role
• Hands-on SIEM experience at an engineering level, including rule authoring and log source integration
• Experience building SOAR workflows and automated response playbooks
• Demonstrated proficiency in PowerShell, Bash, Python, and common Query Languages
• Solid understanding of attack techniques and detection logic mapped to MITRE ATT&CK