Cyber Detection & Response Engineering Lead Expert

SpyroSoft S.A. is hiring for a role within their Cybersecurity Detection & Response (CDR) practice focused on advanced security monitoring, detection engineering, incident response, and automation.

• Extensive experience within Cyber Detection & Response, Security Operations, Incident Response, or related cybersecurity consulting services.
• Hands-on expertise across security monitoring, detection engineering, incident response, security automation, governance, and SOC or CSIRT transformation initiatives.
• Proven experience leading cybersecurity programs, projects, workstreams, or multidisciplinary delivery teams.
• Strong understanding of security operations processes, detection lifecycle management, security data management, and incident handling procedures.
• Ability to design end-to-end security solutions aligned with organizational objectives and cyber risk.
• Practical understanding of AI applications in cybersecurity including governance and validation.
• Experience supporting business development activities such as proposals, RFP responses, solution architecture, effort estimation, and client presentations.
• Excellent communication and stakeholder management skills with technical and executive audiences.
• Strong analytical thinking, problem-solving, and continuous improvement mindset.
• Professional proficiency in English (C1).

Nice to have:

• Experience implementing SOAR solutions and security workflow automation.
• Knowledge of security integrations and API-based automation.
• Experience with cloud-native security monitoring solutions.
• Understanding of AI-enabled capabilities within SIEM, SOAR, EDR, and XDR platforms.
• Familiarity with MITRE ATT&CK and NIST Cybersecurity Framework.
• Relevant cybersecurity certifications.
• Previous consulting environment experience.
• Professional proficiency in German, French, or Spanish.

• Design and deliver solutions across security monitoring, detection engineering, incident response, security operations, and security automation.
• Lead complex Cyber Detection & Response engagements and provide technical direction to multidisciplinary delivery teams.
• Assess existing SOC and CSIRT capabilities, identify improvement opportunities, and define target operating models and transformation roadmaps.
• Develop and enhance threat detection capabilities through detection use cases, correlation rules, monitoring strategies, and response procedures.
• Support the implementation, migration, integration, and optimization of SIEM, SOAR, EDR, XDR, and log management platforms.
• Apply AI-enabled cybersecurity capabilities to improve threat detection, alert triage, investigation processes, and security automation with proper validation, governance, and oversight.
• Translate business objectives, operational challenges, and security risks into practical solution architectures and delivery plans.
• Facilitate workshops, technical discussions, and executive presentations for business and technical stakeholders.
• Provide mentorship and technical coaching to consultants and engineers.
• Contribute to proposals, RFP responses, effort estimations, solution design activities, and client-facing discussions.
• Develop reusable methodologies, frameworks, accelerators, and service offerings to enhance delivery quality and consistency.