Detection & Response Platform Lead

Experteer Overview As Detection u**amp; Response Platform Lead, you drive the endpoint security strategy and scale detection capabilities across team.blue’s infrastructure.You own detection and response platforms, optimize configurations, and partner with DevOps, Vulnerability Management, and SaaS teams to cut alert noise and strengthen preventive controls.You’ll engineer scalable detection, automate workflows, and lead threat-informed improvements across a distributed security organization.This role shapes the future of team.blue’s Security Operations with impact across multiple brands and markets.Compensaciones / Beneficios * Own strategic direction and optimization of detection u** response platforms across team.blue infrastructure * Maintain and improve services by reviewing incidents and collaborating with vendors * Monitor alert trends and tune detection policies to improve true positive rates and reduce alert fatigue * Conduct threat hunting to identify gaps in detection coverage and validate efficacy * Develop custom detection rules using threat intelligence, hunting findings, and incident learnings * Collaborate with Operations, Infrastructure, and Vulnerability Management to enforce protection standards * Provide threat context to upstream teams to reduce alert volume and improve preventive controls * Document detection logic, playbooks, runbooks, and configuration standards * Share detection content and learnings within team.blue * Stay current on endpoint threat landscape, techniques, and detection methods * Implement blameless postmortems after incidents to drive continuous improvement Responsabilidades * 5+ years in technical security roles (security operations, detection engineering, incident response, or security-focused system administration) * Endpoint security expertise across Windows Server, Linux, and macOS * Experience developing detection rules, alerts, and response workflows * Hands-on EDR/XDR experience (SentinelOne experience valued) * Threat analysis skills to interpret attacker TTPs and translate to detections * Collaborative, cross-functional experience with IT, DevOps, and business teams * Strong English communication skills Requisitos principales * remote-first flexibility * hybrid or office-based work * work-life balance * minimal travel * join a distributed security team * inclusive culture

drive continuous improvement Responsabilidades * 5+ years in technical security roles (security operations, detection engineering, incident response, or security-focused system administration) * Endpoint security expertise across Windows Server, Linux, and macOS * Experience developing detection rules, alerts, and response workflows * Hands-on EDR/XDR experience (SentinelOne experience valued) * Threat analysis skills to interpret attacker TTPs and translate to detections * Collaborative, cross-functional experience with IT, DevOps, and business teams * Strong English communication skills Requisitos principales * remote-first flexibility * hybrid or office-based work * work-life balance * minimal travel * join a distributed security team * inclusive culture