Senior Detection and Response Engineer

About the role

We are looking for a senior detection and response engineer to evaluate agent-generated investigations, ensuring conclusions are valid, evidence sufficient and actionable for L1/L2 analysts. This hands-on technical role involves direct interaction with customers, leveraging extensive SOC experience.

Key responsibilities

• Own corporate IT operations and infrastructure, including endpoint fleet management and onboarding/offboarding lifecycle.
• Run identity and access management processes: SSO, provisioning, joiner/mover/leaver flows, access reviews and least-privilege enforcement.
• Manage device estate through MDM solutions, handling enrollment, baseline configuration, patching and compliance policies.
• Administer productivity and SaaS stack, overseeing licensing, tenant configuration and application governance.
• Maintain networking and connectivity, including firewalls, VPN, Wi-Fi and switching across sites.
• Ensure IT controls align with SOC 2 and ISO 27001 standards and collaborate with security teams on endpoint protection and EDR coverage.
• Assess agent-generated investigations for validity, completeness and actionable insight, and communicate findings to customers.

Required profile

• Extensive hands-on experience in a Security Operations Center (SOC) environment.
• Proven ability to investigate and evaluate security alerts and investigations.
• Strong communication skills for interacting with customers and internal teams.
• Senior-level technical expertise with a focus on incident response and detection.

Required skills

• Switching
• Freshservice
• SOC 2
• Jira Service Management
• Jamf
• EDR
• Mosyle
• MDM
• Zendesk
• Google Workspace administration
• Microsoft Entra ID
• Wi-Fi
• Kandji
• JumpCloud
• ServiceNow
• Fortinet
• Networking
• Zscaler
• Firewalls
• Identity and Access Management
• Okta
• ISO 27001
• VPN
• Endpoint Security
• Intune
• Palo Alto
• Azure AD
• Cisco Meraki