Cyber Detection & Response Engineering Lead

Quick Facts

• Role: Cyber Detection & Response Engineering Lead Expert

• Focus: Security monitoring, detection engineering, incident response, and security automation

Description

Lead the design, implementation, and continuous improvement of advanced security monitoring, detection engineering, incident response, and automation capabilities across diverse technology environments. Work with clients and delivery teams to develop scalable security operations capabilities, drive SOC/CSIRT transformations, and implement innovative detection and response solutions using modern security platforms and AI-enabled technologies.

Responsibilities

• Design and deliver solutions across security monitoring, detection engineering, incident response, security operations, and security automation

• Lead complex Cyber Detection & Response engagements and provide technical direction to multidisciplinary delivery teams

• Assess existing SOC and CSIRT capabilities, identify improvement opportunities, and define target operating models and transformation roadmaps

• Develop and enhance threat detection capabilities through detection use cases, correlation rules, monitoring strategies, and response procedures

• Support SIEM, SOAR, EDR, XDR, and log management platform implementation, migration, integration, and optimization

• Apply AI-enabled cybersecurity capabilities to improve threat detection, alert triage, investigation, and security automation with proper validation, governance, and human oversight

• Translate business objectives, operational challenges, and security risks into practical solution architectures and delivery plans

• Facilitate workshops, technical discussions, and executive presentations

• Mentor and coach consultants and engineers

• Contribute to proposals, RFP responses, effort estimations, and client-facing discussions

• Develop reusable methodologies, frameworks, accelerators, and service offerings to improve delivery quality and consistency

Requirements

• Extensive experience in cyber detection and response, security operations, incident response, or related cybersecurity consulting

• Hands-on expertise across multiple CDR domains: security monitoring, detection engineering, incident response, security automation, governance, and SOC/CSIRT transformation

• Proven experience leading cybersecurity programs/projects/workstreams or multidisciplinary delivery teams

• Strong understanding of security operations processes, detection lifecycle management, security data management, and incident handling procedures

• Ability to design end-to-end security solutions aligned with organizational objectives and operational requirements

• Practical understanding of AI in cybersecurity, including benefits, limitations, risks, governance, validation, and responsible use

• Experience supporting business development (proposals, RFP responses, solution architecture, effort estimation, client presentations)

• Excellent communication and stakeholder management skills with technical specialists and executive leadership

• Strong analytical thinking, problem-solving, and continuous improvement mindset

• Professional English proficiency (C1)

Benefits

Not specified in the provided text.