Skip to main content

Senior Detection & Response Platform Engineer

Posted today

costar groupArlington (VA)

SENIORITY

Lead

Apply (opens in a new tab)

About the role

CoStar Group seeks a Lead Detection & Response Platform Engineer to own the SIEM/XDR/SOAR platform, defining triage standards and building automation with case-management workflows. You’ll mentor analysts and engineers, coordinate cross‑functional incident response, and drive measurable improvements in detection and response. Arlington or Richmond, VA, hybrid work, Mon–Thu in office, Fri work-from-home. You will connect identity, endpoint, cloud and email telemetry, map coverage to MITRE ATT&CK,

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this