Lead Detection​/SOAR Engineer_ Exp

Role & Responsibilities

• 8+ years of experience in cybersecurity with a focus on detection engineering, SOC operations, or incident response.
• 3+ years of hands‑on experience in detection engineering / SIEM content development, and SOAR platforms (Crowd Strike Falcon Fusion preferred).
• Strong experience with Crowd Strike Falcon (EDR + NGSIEM).
• Proven experience building detection rules, behavioral analytics, and correlation logic.
• Proficiency in scripting and automation (Python, Power Shell, or similar).
• Experience with detection‑as‑code and API integrations.
• Strong understanding of MITRE ATT&CK (Enterprise &ICS), threat detection methodologies, and incident response lifecycle.
• Hands‑on experience with SIEM, EDR, NDR, and threat intelligence platforms.
• Foundational knowledge of IT and OT security (ICS/SCADA environments).
• Experience securing R&D environments and intellectual property.
• Working knowledge of cloud security (AWS, Azure, GCP).

• GIAC Certified Incident Handler (GCIH).
• GIAC Security Operations Certified (GSOC).
• GIAC Security Essentials (GSEC).
• Certified Cloud Security Professional (CCSP).
• Certified Information Systems Security Professional (CISSP).
• CompTIA Security+.
• CompTIA CySA+.
• AWS Certified Security Specialty.
• Microsoft SC-2.