Security Engineer – Detection & Response

Global Brain Corporation

. Design, build, and maintain automation, playbooks, and systems for timely triage, investigation, and incident response .

Posted 10/14/2026full-timeUnited StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering and incident response, with a strong focus on automation, detection engineering, and cloud security principles. Capable of leading cross-functional teams to enhance security operations and improve incident response metrics.

Highest-signal resume keywords

Security EngineeringIncident ResponseEDR, SIEM, SOARCloud Infrastructure SecurityAutomation Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringDetection EngineeringIncident ResponseScripting LanguagesQuery LanguagesAutomation DevelopmentThreat HuntingDigital ForensicsInfrastructure-as-Code SecurityLog Management

Soft Skills

Clear CommunicationCross-Functional CollaborationSound Risk-Based JudgmentDecision-Making Under Pressure

Tools & Technologies

EDRSIEMSOARLog Management ToolsCloud Security ToolsAutomation Tools

Industry Keywords

Incident TriageSecurity TelemetrySelf-Service TriageHigh-Growth Startup EnvironmentsContainerized EnvironmentsKubernetes Security

Tech Stack

Tools & technologies

CloudKubernetes

About the role

Key responsibilities & impact

Design, build, and maintain automation, playbooks, and systems for timely triage, investigation, and incident response
Develop and refine high-signal detections while minimizing noise
Integrate security telemetry and tooling across cloud and application infrastructure
Enable consistent investigation and self-service triage
Lead cross-functional incident response across applications, cloud infrastructure, endpoints, identity, and internal services
Translate incident data and response metrics into secure-by-design improvements with product and infrastructure teams
Evaluate response procedures and partner with engineering, infrastructure security, IT, and operational teams to close gaps and improve the operating model
Report directly to the Head of Security

Requirements

What you’ll need

Demonstrated capability in security engineering, detection engineering, or incident response
Hands-on experience investigating security incidents or suspicious behavior in complex environments
Practical experience with EDR, SIEM, SOAR, log-management, or equivalent detection-and-response tooling
Ability to write code and build software automation or detections in at least one relevant scripting or query language
Strong understanding of modern cloud infrastructure and SaaS security principles
Sound risk-based judgment when prioritizing threats and operational tasks
Ability to make sound, timely decisions with incomplete information during active incidents
Clear communication and cross-functional collaboration skills during high-pressure situations
Are you currently legally authorized to work in the US?
Preferred: Building self-serve security triage automation or AI-assisted response capabilities
Preferred: Threat hunting, digital forensics, threat intelligence, or infrastructure-as-code security controls
Preferred: Investigating complex security events within containerized or Kubernetes-based cloud environments
Preferred: Translating security incident trends into architectural or systemic engineering improvements
Preferred: Experience navigating security challenges in fast-paced, high-growth startup environments

Benefits

Comp & perks

Reasonable accommodations for applicants and employees with disabilities or sincerely held religious beliefs
Regular on-call rotation supporting rapid response to critical security incidents and operational resilience