Security Response Engineer, Incident Response

Own the end-to-end security incident response lifecycle as an incident commander, coordinating high-severity incidents from scoping through recovery and post-mortem improvements. Participate in on-call to triage alerts and manage escalations, improve readiness via playbooks and tabletop exercises, and close security telemetry gaps by building or enhancing tooling. Improve detection quality by writing and tuning high-signal detections in Sigma, leveraging prior incident response leadership and coding experience.