Security Incident Response Engineer: SIEM & EDR

Predactica™ is seeking a hands-on Security Incident Response Engineer to manage and optimize security tools used to detect, investigate, and respond to incidents. The role focuses on incident investigation, detection tuning, platform integration, response automation, and mentoring junior team members.

Responsibilities:

• Deploy and manage SIEM, EDR, IDS/IPS, and digital forensic tools in a large enterprise environment
• Configure data collection, tune detection rules and alerts, and improve tool performance and detection effectiveness
• Integrate security platforms and automate investigation and response workflows using Python or PowerShell
• Investigate complex security incidents, perform root cause analysis, and recommend remediation actions
• Maintain platform health through troubleshooting, patching, upgrades, and configuration management
• Document configurations and response procedures; support post-incident reviews and mentor junior team members

Requirements:

• 5–7 years of cybersecurity experience, including hands-on incident response and security platform administration
• Strong experience deploying, configuring, and optimizing SIEM and EDR platforms—for example, Splunk, QRadar, Microsoft Sentinel, CrowdStrike, or Carbon Black
• Experience with IDS/IPS and forensic tools, such as Snort, Suricata, EnCase, or FTK
• Proficiency in Python or PowerShell for automation and tool integration
• Strong understanding of network security, endpoint security, threat detection, and forensic investigation
• Ability to troubleshoot platform issues, communicate investigation findings, and collaborate with security operations and IT teams
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent experience
• Relevant certifications such as GCIH, GCFA, GREM, CISSP, or ECIH
• Experience leading security tool upgrades, migrations, and continuous improvement initiatives