Expert Detection and Response Engineer

Job not on LinkedIn

🕒 July 10

🏄 California – Remote

🏄 California – Remote

💵 $124k - $229.4k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👷🏻‍♀️ Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

XBOX

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2001

🎮 Gaming

🔧 Hardware

👥 B2C

Gaming • Hardware • B2C

XBOX is Microsoft’s consumer gaming brand and platform. It designs and sells video game consoles (Xbox Series X and Series S), first- and third-party games and accessories, and operates digital services such as the Microsoft Store for games, Xbox Game Pass subscription and Xbox Cloud Gaming. Xbox also provides PC and mobile gaming access, community and support services, and integrates with Microsoft accounts and other Microsoft products.

📋 Description

• Detect, investigate, and respond to security incidents across cloud, corporate, and production environments • Monitor and analyze security telemetry and audit logs to identify anomalous activity, unauthorized access, and emerging threats • Perform alert triage, in‑depth investigation, and forensic analysis across the full incident lifecycle • Execute endpoint, identity, cloud, and malware investigations, including timeline reconstruction and indicator extraction • Develop, refine, and tune threat detections within the SIEM • Enhance investigation and response efficiency through automation and advanced analytics • Design, build, or operate AI/LLM-assisted triage and enrichment workflows • Evaluate and harden AI-assisted security tooling against adversarial input • Contribute to TDIR procedures, playbooks, runbooks, and documentation • Collaborate closely with engineering teams, business stakeholders, and vendors during investigations • Participate in an on‑call rotation and provide off‑hours support for critical incidents • Communicate investigation findings clearly to technical teams and leadership • Occasional travel (up to approximately 10%) may be required.

🎯 Requirements

• Bachelor’s degree in computer science, Information Security, or equivalent practical experience • 10+ years of progressively accountable security experience, with a demonstrated track record of independent, expert-level judgment in incident response • Hands‑on experience in threat detection, security operations, and incident response • Strong understanding of the modern threat landscape, attacker tactics, techniques, and procedures • Proven ability to detect, triage, investigate, and respond to security incidents in enterprise environments • Experience performing detailed log analysis, correlation, and investigative triage • Strong written and verbal communication skills, with the ability to clearly articulate incident findings and response actions • Ability to work independently and collaboratively within the TDIR team and with technical and business stakeholders • Willingness to participate in an on‑call rotation and provide off‑hours support for critical security incidents • Hands-on experience with security monitoring platforms such as SIEM and EDR, including building or significantly extending detection content • Scripting or programming experience (e.g., Python, PowerShell, KQL) to support detection, investigation, or response automation • Strong host- and network-based forensic skills, including timeline reconstruction and root cause analysis • Knowledge of LLMs applied to security operations • Fluency in English.

🏖️ Benefits

• Medical, dental, vision, health savings account or health reimbursement account • Healthcare spending accounts, dependent care spending accounts, life and AD&D insurance • Disability insurance; 401(k) with Company match, tuition reimbursement, charitable donation matching • Paid holidays and vacation, paid sick time, floating holidays, compassion and bereavement leaves, parental leave • Mental health & wellbeing programs, fitness programs, free and discounted games, and a variety of other voluntary benefit programs like supplemental life & disability, legal service, ID protection, rental insurance, and others • Relocation assistance for geographic moves required for the job.