Detection & Response Engineer
TechBiz Global
Remote, South Africa
At TechBiz Global , we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking a Detection & Response Engineer to join one of our clients' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.
Key Responsibilities:
Investigate security cases and targeted hunts using CrowdStrike Falcon Next-Gen SIEM and CQL; correlate telemetry, assess scope and impact, document findings, and recommend appropriate actions.
Develop, test, deploy, tune, and maintain detection logic, queries, dashboards, analyst guides, and version-controlled detection content.
Build and maintain Falcon Fusion SOAR workflows for enrichment, evidence capture, routing, escalation, and authorized response.
Validate telemetry coverage and quality; troubleshoot parsing, normalization, mapping, and source-data issues.
Translate validated investigations into platform workflow specifications and co-build scripts, API integrations, workflow components, and prototypes with Product and Engineering.
Test workflows and detections against representative cases; monitor outcomes, exceptions, and production...
Sourced from Himalayas
This page is a short summary. The full posting and the application are at the source.