Sr Detection & Response Engineer

Overview

Sr Detection & Response Engineer in MX’s Detection and Response team, focused on improving threat detection, incident response, and security operations efficiency.

What you'll do

• Analyze inbound Devo SIEM alerts to identify and prioritize high-severity threats.
• Investigate potential incidents by correlating data across endpoints, networks, cloud, and applications.
• Develop enrichments (e.g., custom parsers, dashboards, integrations) to improve alert fidelity.
• Unify and aggregate vulnerability data from Snyk, Tenable, and CrowdStrike into centralized platforms.
• Drive automation for security workflows using scripting, SOAR platforms, or Devo capabilities.
• Optimize Devo SIEM through configuration, tuning, and custom development.
• Lead incident response leadership and conduct tabletop/red team preparedness exercises for breaches.

What you'll need

• 5+ years hands-on experience in detection engineering, incident response, threat hunting, or security operations.
• Strong SIEM expertise, preferably Devo, including query development and alert tuning.
• Hands-on vulnerability management/scanning tool experience with Snyk, Tenable, and CrowdStrike.
• Experience with vulnerability aggregation and risk management platforms (Axonius, Brinqa, or Vulcan Cyber).
• Proficiency in automation and scripting (Python, Bash) for enrichments and SOAR workflows.
• Experience as incident response lead/incident commander and building “first to know” detection strategies.
• Knowledge of PCI DSS-regulated environments and compliance controls for incident management and vulnerability remediation.

Details

• Works in the office as part of a standard 40-hour workweek.
• Must have legal right to work in India without sponsorship.