Detection and Response Lead

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Detection and Response Lead based in India.

This is a senior individual-contributor role responsible for building and leading a modern detection and response practice within a lean, globally distributed security function. You will own the strategy for security detections across identity, cloud, endpoint, email, and other critical attack surfaces.

The role combines detection engineering, incident response, threat hunting, automation, telemetry strategy, and managed security provider oversight. You will lead significant incidents from escalation through containment, investigation, root-cause analysis, evidence handling, and executive-ready reporting.

A major focus will be improving signal quality, strengthening threat-model-based coverage, and ensuring that managed SOC escalations meet a consistently high standard. You will also shape the responsible use of AI and automation across detection, enrichment, investigation, and response workflows.

This is an opportunity to define how a growing security organization detects, investigates, and responds to real-world threats rather than simply inheriting an existing queue of alerts.