{"id":3337697,"url":"https://alion.io/job/commscope-sr-detection-and-response-engineer-information-security","title":"Sr Detection and Response Engineer, Information Security","company":{"id":58508,"name":"CommScope","domain":"commscope.com","url":"https://alion.io/company/commscope","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charlotte, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":195000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"Git","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PagerDuty","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-27T14:27:13Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-01T11:36:57Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Sr Detection and Response Engineer, Information Security\nJob Number: 82746\nReports To: Manager, Security Operations\nFLSA Status: Exempt\nRevision Date: 10/20/2026\nGeneral Summary\nCommScope is seeking a Senior Detection and Response Engineer to serve as a L3 technical lead and escalation point in our Security Operations Center. This is a hands-on engineering role. You will own complex investigations and incident response end to end, and build the detections, automations, and AI-assisted workflows that let a lean team operate at scale.\nYou will work closely with our MDR partner and junior analysts, turning lessons learned from incidents into durable detection and response capability across a global IT and manufacturing (OT) environment. You will be expected to reduce manual effort, improve signal quality, and measurably shorten time to detect and respond.\nCommScope’s security team protects the people, processes, and technologies that serve our customers, and their customers: the billions of people our products and services help connect every day.\nDuties & Responsibilities\nIncident Response and Escalation\nServe as the L3 escalation point for alerts and incidents from L1/L2 analysts and our MDR provider. Lead investigations through containment, eradication, and recovery.\nAct as technical incident lead for high-severity events. Coordinate with IT, infrastructure, OT, and business stakeholders, and produce clear executive and technical incident reports.\nPerform host, network, identity, email, and cloud forensics, including log analysis, memory and disk triage, and malware behavior analysis.\nDetection Engineering\nDesign, build, test, and tune detections in the SIEM and EDR (Microsoft Sentinel, CrowdStrike NG-SIEM) using KQL and related query languages. Map coverage to MITRE ATT&CK and CommScope’s top enterprise and OT threat scenarios.\nOwn the detection lifecycle, including false-positive reduction, coverage gap analysis, and detection-as-code practices with version control and peer review.\nEngineer log pipelines and data quality with Cribl, so the telemetry needed for detection and investigation is complete, normalized, and cost-effective.\nAutomation and AI\nBuild and maintain SOAR playbooks and automations for enrichment, triage, case creation, containment, and closure. Target measurable reductions in analyst hours and MTTR.\nDesign, test, and operationalize AI-assisted SOC workflows, such as Copilot agents, LLM-based triage and summarization, and guided playbook agents. Apply appropriate guardrails: least privilege, human approval for destructive actions, prompt-injection resilience, and output validation.\nIntegrate security tooling through APIs and scripting (Python, PowerShell) to remove manual, repetitive work.\nThreat Hunting and Intelligence\nConduct hypothesis-driven threat hunts informed by current threat intelligence and actor TTPs, and convert findings into new detections.\nAssess emerging vulnerabilities and threats for CommScope exposure, and recommend prioritized response actions.\nProgram and Team\nDevelop and maintain SOC runbooks, escalation procedures, and tabletop exercises.\nMentor L1/L2 analysts through case reviews, query and playbook coaching, and knowledge transfer.\nReport on SOC effectiveness metrics, including MTTD, MTTR, detection coverage, automation rate, and analyst hours saved.\nParticipate in the on-call rotation (PagerDuty) as the senior escalation tier.\nAccountability / Impact\nGlobal CommScope footprint\nCompetencies\nManages Complexity: Makes sense of complex, high-volume, and sometimes contradictory security data to find root causes and resolve incidents.\nDecision Quality: Makes sound, timely containment and response decisions based on analysis, experience, and judgment, and serves as a trusted source of technical advice.\nOptimizes Work Processes: Continuously improves SOC workflows, automating manual and repetitive tasks to increase speed, consistency, and efficiency.\nTech Savvy: Anticipates the impact of emerging technologies, including AI, and adopts tools that deliver real value.\nAction Oriented: Acts with urgency and decisiveness in fast-changing, unpredictable situations, and steps up to manage tough issues.\nBeing Resilient: Stays composed and effective under pressure, rebounding from setbacks while keeping incident response on track.\nCommunicates Effectively: Delivers clear, timely communication tailored to the audience, from technical incident details to executive summaries.\nRequired Qualifications for Consideration\nBachelor’s in related curriculum such as \nInformation Security, Computer Science, or related field (or equivalent experience)\n6+ Years of Related Experience\nSkills Required\nInclude demonstrated competencies and physical, mental, & interpersonal skills.\n6+ years in information security, including 3+ years in a SOC, incident response, or detection engineering role at L2/L3 or equivalent. Bachelor’s degree in a related field or equivalent professional experience.\nProven experience leading investigations and response for significant security incidents in an enterprise environment.\nAdvanced proficiency with SIEM and EDR platforms (Microsoft Sentinel and CrowdStrike NG-SIEM preferred), including authoring and tuning detections in KQL or similar.\nHands-on experience building SOAR playbooks and automations. Scripting proficiency in Python and/or PowerShell, plus REST API integration.\nPractical experience applying AI or LLM tools to security operations (triage, enrichment, summarization, query generation), with a clear understanding of their risks and limits.\nStrong working knowledge of Windows, Linux, and macOS internals, Active Directory and Entra ID, email security, network protocols, and cloud (Azure/M365) attack surfaces.\nWorking knowledge of MITRE ATT&CK, the NIST incident response lifecycle, and the cyber kill chain.\nClear written and verbal communication, including incident reports for both technical and executive audiences.\nSelf-directed, with sound judgment under pressure and the ability to prioritize across competing incidents and engineering work.\nDESIRED- Certifications such as GCIH, GCFA, GCIA, GDAT, OSCP, or CrowdStrike/Microsoft security certifications.\nDESIRED- Experience with OT/ICS security monitoring in manufacturing environments.\nDESIRED- Experience with log pipeline tooling (Cribl), detection-as-code, and Git-based workflows.\nDESIRED- Experience working with an MDR provider.\nInterview Exercises\nA live investigation exercise using a sample alert or log set, ending with a short written summary.\nA detection or automation design walkthrough. For example: write a KQL detection and describe how you would automate the response, including AI use and guardrails.","description_format":"text","description_chars":6730,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Telecom Infrastructure","Network Equipment","Optical Communications","Electrical Equipment & Cables"],"lifecycle":[{"event":"open","at":"2026-10-27T14:27:13Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":26,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/commscope-sr-detection-and-response-engineer-information-security","json_url":"https://alion.io/job/commscope-sr-detection-and-response-engineer-information-security.json","meta":{"generated_at":"2026-11-01T12:32:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19298,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58508},"rest":"https://alion.io/mcp/rest/get_company?id=58508"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcommscope-sr-detection-and-response-engineer-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcommscope-sr-detection-and-response-engineer-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcommscope-sr-detection-and-response-engineer-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/commscope-sr-detection-and-response-engineer-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcommscope-sr-detection-and-response-engineer-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3337697}},{"tool":"search_jobs","arguments":{"company":"commscope.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3337697},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}