Senior Detection and Incident Response Engineer

🔥 15 hours ago

🇺🇸 United States – Remote

💵 $175k - $185k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

InvestCloud, Inc.

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🛡️ Insurance

📦 Logistics

Consulting • Insurance • Logistics

InvestCloud, Inc. is a cloud-based financial technology company that provides a connected suite of digital platforms for wealth and asset management. Its products include managed-account (PMA) capabilities that unify public and private assets, an APL for trading, rebalancing and model marketplaces, financial planning and enterprise tools for billing, post-trade and compliance. InvestCloud serves wealth managers, asset managers, private banks, broker-dealers and TAMPs with SaaS solutions designed to streamline operations, deepen client relationships and deliver digital client experiences at scale.

📋 Description

• Own the CrowdStrike Falcon platform end to end, including policy, tuning, host tagging and grouping, Real Time Response, and Falcon Fusion workflows • Design detection coverage across endpoints, identity, cloud, network, firewall, email, and SaaS applications • Build automation that detects, contains, and remediates threats in seconds while preventing unintended business disruption • Lead technical incident response from first alert to closure, including containment, investigation, evidence, and lessons learned • Manage the managed detection and response (MDR) provider, tune detections, and enforce measurable service levels • Analyze system, firewall, identity, and application logs to find and confirm malicious activity • Write and test incident response playbooks and run exercises with technical and business teams • Lead and develop detection and response engineers in the U.S. and India • Participate in the on-call rotation • Keep leadership informed during serious incidents

🎯 Requirements

• Eight or more years of experience in detection engineering and incident response, including leading the response to real incidents • Expert-level CrowdStrike Falcon administration, including Falcon Fusion SOAR workflows, Real Time Response, host grouping and tagging, and Falcon APIs • Expert experience with managed detection and response (MDR), extended detection and response (XDR), and managed security service providers (MSSPs) • Deep knowledge of Windows and Linux system logs, firewall logs, identity logs, and cloud audit logs • Strong scripting skills in Python, PowerShell, or similar, and experience automating through APIs • Experience with a SIEM platform such as CrowdStrike Falcon Next-Gen SIEM, Splunk, or Microsoft Sentinel • Working knowledge of MITRE ATT&CK and mapping detection coverage to it • Calm, clear communication during high-pressure incidents • Preferred: Digital forensics experience or certifications such as GCIH, GCFA, or GNFA • Preferred: Experience in financial services or another regulated industry • Preferred: Experience with anti-ransomware or deception technologies

🏖️ Benefits

• Medical/Rx insurance • Dental insurance • Vision insurance • Disability insurance • Life/AD&D insurance plans • Flexible Savings Account (FSA) • Health Savings Account (HSA) • Employee Assistance Plan (EAP) • Health advocacy • Voluntary ancillary plans: accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance • 401(k) retirement savings plan with company match • Paid time off