Detection & Response Engineer

Job not on LinkedIn

🔥 7 minutes ago

🇷🇴 Romania – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 24%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 42 days.
• 102 open roles for a team of 17.
• No salary listed.

Apply Now

Find Similar Remote Jobs

TechBiz Global

WebsiteLinkedInAll Job Openings

51 - 200 employees

📣 Marketing

📦 Logistics

🎯 Recruiter

Marketing • Logistics • Recruitment

TechBiz Global is a leading recruitment and software development company that specializes in connecting businesses with top-tier talent across 28+ countries. They serve clients from startups to major enterprises, providing expertise in hiring key roles in industries such as FinTech. In addition to talent acquisition, TechBiz Global offers comprehensive software development services to turn clients' visions into reality, powering digital transformations with expert engineers. The company also provides strategic CTO consulting services and flexible outstaffing and outsourcing solutions, helping businesses manage growth and optimize technology processes. Recognized as a top IT recruitment and consulting firm, TechBiz Global is dedicated to delivering personalized and innovative solutions to its clients, ensuring they have the tools necessary for success.

📋 Description

• Investigate security cases and targeted hunts using CrowdStrike Falcon Next-Gen SIEM and CQL • Correlate telemetry, assess scope and impact, document findings, and recommend appropriate actions • Develop, test, deploy, tune, and maintain detection logic, queries, dashboards, analyst guides, and version-controlled detection content • Build and maintain Falcon Fusion SOAR workflows for enrichment, evidence capture, routing, escalation, and authorized response • Validate telemetry coverage and quality; troubleshoot parsing, normalization, mapping, and source-data issues • Translate validated investigations into platform workflow specifications and co-build scripts, API integrations, workflow components, and prototypes with Product and Engineering • Test workflows and detections against representative cases; monitor outcomes, exceptions, and production feedback • Document ownership and support handoffs • Provide technical support, troubleshooting, knowledge transfer, and coaching • Coordinate assigned analysis and platform work

🎯 Requirements

• 5+ years of relevant security experience, including at least 2 years developing, testing, and tuning detection logic, or equivalent demonstrated capability • Production proficiency with CrowdStrike Falcon Next-Gen SIEM, including CQL, cross-source investigations, detection content, telemetry interpretation, and tuning • Hands-on Falcon Fusion SOAR workflow experience and practical use of Charlotte AI with evidence verification and awareness of approval boundaries • Practical Python, REST/Falcon APIs, JSON, authentication, error handling, and secure credential management • Familiarity with PowerShell or another relevant scripting language • Experience with telemetry onboarding, parser/normalization troubleshooting, MITRE ATT&CK, Windows/Linux events, controlled changes, version control, peer review, and regression testing • Strong investigation judgment, defensible documentation, communication, and cross-functional collaboration skills • Nice to have: Experience converting SOC runbooks or manual analysis into production workflows or internal security platforms • Nice to have: CrowdStrike resident, responder, partner implementation, or customer-embedded Falcon experience; FalconPy or comparable API tooling • Nice to have: Experience partnering with Product and Engineering on analyst-facing features, case lifecycle integration, acceptance testing, or iterative delivery • Nice to have: Managed security services, multi-client or follow-the-sun SOC operations, and ITSM integrations such as ServiceNow or Jira • Nice to have: Relevant CrowdStrike training or credentials, GIAC

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume