Commscope is hiring: Sr Detection and Response Engineer, Information Security in charlotte
commscopeCharlotte (NC)
Commscope is hiring: Sr Detection and Response Engineer, Information Security in charlotte
Posted today
commscopeCharlotte (NC)
SENIORITY
Manager
About the role
Overview:
In this role you lead end-to-end incident response as the L3 technical expert in the SOC, building detections and automations to scale a lean team. You’ll partner with an MDR provider and junior analysts to improve signal quality and shorten detection and response times across global IT and OT environments. You will own investigations, coordinate with stakeholders, and drive durable detection capabilities. You will apply AI-assisted workflows to reduce manual effort and enhance operational effectiveness. This is a hands-on role with a clear impact on security outcomes and incident readiness.
Responsibilities:
Serve as L3 escalation point and lead investigations through containment, eradication, and recovery Act as technical incident lead for high-severity events and coordinate with IT, OT, and business stakeholders Perform host, network, identity, email, and cloud forensics including log analysis and malware behavior assessment Design, build, test, and tune detections in SIEM/EDR and map coverage to MITRE ATT&CK Own detection lifecycle, reduce false positives, and maintain detection-as-code with version control Engineer and optimize log pipelines and data quality with Cribl for complete and cost-effective telemetry Build and maintain SOAR playbooks and automations; drive reductions in analyst hours and MTTR Develop AI-assisted SOC workflows with guardrails and ensure safe deployment Conduct threat hunting and intelligence to create new detections and prioritize responses Develop runbooks, perform tabletop exercises, mentor analysts, and report SOC metrics
Key requirements:
6+ years in information security with 3+ years in a SOC/incident response or detection engineering role Proven experience leading investigations for significant enterprise incidents Advanced proficiency with SIEM/EDR (Microsoft Sentinel and CrowdStrike NG-SIEM preferred) and authoring/tuning detections with KQL Hands-on experience building SOAR playbooks and automations Scripting in Python and/or PowerShell with REST API integration Experience applying AI/LLM tools to security operations and understanding associated risks Strong knowledge of Windows, Linux, macOS internals, Active Directory/Entra ID, email security, network protocols, and cloud (Azure/M365) attack surfaces Working knowledge of MITRE ATT&CK, NIST incident response lifecycle, and cyber kill chain Clear written and verbal communication for technical and executive audiences Self-directed with ability to prioritize across incidents and engineering work DESIRED – Certifications such as GCIH, GCFA, GCIA, GDAT, OSCP, or CrowdStrike/Microsoft security certs DESIRED – OT/ICS security monitoring experience in manufacturing DESIRED – Experience with Cribl, detection-as-code, and Git-based workflows DESIRED – Experience working with an MDR provider strong communication mentoring self-directed Microsoft Sentinel CrowdStrike NG-SIEM KQL
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.