Senior Detection and Incident Response Engineer

InvestCloud, Inc.

. Own the CrowdStrike Falcon platform end to end, including policy, tuning, host tagging and grouping, Real Time Response, and Falcon Fusion workflows .

Posted 10/20/2026full-timeRemote • United StatesSenior💰 $175,000 - $185,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expert-level administration of the CrowdStrike Falcon platform, including incident response leadership and automation of threat detection and remediation. Proficient in analyzing logs across various systems and managing detection and response teams effectively.

Highest-signal resume keywords

CrowdStrike Falcon AdministrationIncident Response LeadershipDetection EngineeringScripting Skills in PythonManaged Detection and Response (MDR)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Detection EngineeringIncident ResponseAutomation through APIsLog AnalysisDigital ForensicsMITRE ATT&CK KnowledgeWindows System LogsLinux System LogsFirewall LogsCloud Audit Logs

Soft Skills

Calm CommunicationLeadership

Tools & Technologies

CrowdStrike FalconCrowdStrike Falcon Next-Gen SIEMSplunkMicrosoft Sentinel

Certifications & Qualifications

GCIHGCFAGNFA

Industry Keywords

Managed Security Service Providers (MSSPs)Financial ServicesRegulated Industry

Tech Stack

Tools & technologies

CloudLinuxPythonSplunk

About the role

Key responsibilities & impact

Own the CrowdStrike Falcon platform end to end, including policy, tuning, host tagging and grouping, Real Time Response, and Falcon Fusion workflows
Design detection coverage across endpoints, identity, cloud, network, firewall, email, and SaaS applications
Build automation that detects, contains, and remediates threats in seconds while preventing unintended business disruption
Lead technical incident response from first alert to closure, including containment, investigation, evidence, and lessons learned
Manage the managed detection and response (MDR) provider, tune detections, and enforce measurable service levels
Analyze system, firewall, identity, and application logs to find and confirm malicious activity
Write and test incident response playbooks and run exercises with technical and business teams
Lead and develop detection and response engineers in the U.S. and India
Participate in the on-call rotation
Keep leadership informed during serious incidents

Requirements

What you’ll need

Eight or more years of experience in detection engineering and incident response, including leading the response to real incidents
Expert-level CrowdStrike Falcon administration, including Falcon Fusion SOAR workflows, Real Time Response, host grouping and tagging, and Falcon APIs
Expert experience with managed detection and response (MDR), extended detection and response (XDR), and managed security service providers (MSSPs)
Deep knowledge of Windows and Linux system logs, firewall logs, identity logs, and cloud audit logs
Strong scripting skills in Python, PowerShell, or similar, and experience automating through APIs
Experience with a SIEM platform such as CrowdStrike Falcon Next-Gen SIEM, Splunk, or Microsoft Sentinel
Working knowledge of MITRE ATT&CK and mapping detection coverage to it
Calm, clear communication during high-pressure incidents
Preferred: Digital forensics experience or certifications such as GCIH, GCFA, or GNFA
Preferred: Experience in financial services or another regulated industry
Preferred: Experience with anti-ransomware or deception technologies

Benefits

Comp & perks

Medical/Rx insurance
Dental insurance
Vision insurance
Disability insurance
Life/AD&D insurance plans
Flexible Savings Account (FSA)
Health Savings Account (HSA)
Employee Assistance Plan (EAP)
Health advocacy
Voluntary ancillary plans: accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance
401(k) retirement savings plan with company match
Paid time off