{"id":1528632,"url":"https://alion.io/job/link-group-cyber-detection-response-engineering-lead-expert","title":"Cyber Detection & Response Engineering Lead Expert","company":{"id":880,"name":"Link Group","domain":"linkgroup.co","url":"https://alion.io/company/link-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitify","truth_index":{"grade":"B","score":84,"open_postings":103,"ghost_share":0,"stale_share":0.65,"repost_share":0.01,"time_to_fill_p50_days":47,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":115000,"period":"year","method":"role_seniority_country_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Human-in-the-Loop","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"NIST CSF","optional":true},{"name":"Python","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-09-29T13:39:06Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-24T13:16:48Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":24},"description":"Solution Architecture & Design: Design and execute pragmatic solutions across security monitoring, detection engineering, incident response, automation, and security operations (SOC/CSIRT).\nAI-Enabled Capabilities: Apply AI-driven technologies to enhance detection accuracy, investigation speed, response workflows, and operations - ensuring robust validation and human oversight.\nTechnology Leadership: Guide SIEM, SOAR, EDR, XDR, log management, integration, migration, and detection content operations.\nClient Advisory & Transformation: Translate complex business requirements and security risks into target operating models, architectural designs, and strategic improvement roadmaps.\nStakeholder Engagement: Facilitate workshops, present strategic recommendations, and align technical teams with executive business stakeholders.\nTeam Leadership & Mentorship: Lead, coach, and review the work of consultants, nurturing their technical capabilities and career growth.\nBusiness Development: Drive proposal development, RFP responses, effort estimation, solution shaping, and client presentations.\nPractice Building: Develop reusable CDR frameworks, accelerators, service offerings, and delivery methodologies to scale the practice.\nRequirements\nProfessional Experience: Strong background in cybersecurity detection and response, SOC operations, incident response, or dedicated cybersecurity consulting.\n CDR Expertise: Proven hands-on delivery experience across multiple CDR domains (SIEM, detection engineering, security automation, IR, governance, or target operating model design).\nProject Leadership: Demonstrated track record of leading cybersecurity engagements, complex workstreams, or multidisciplinary project teams.\nAI Integration Awareness: In-depth understanding of AI applications within CDR, including potential opportunities, limitations, security risks, validation needs, and human-in-the-loop requirements.\nPresales & Bidding: Experience contributing to proposals, RFP responses, effort estimation, and business development initiatives.\n Communication & Soft Skills: Fluent English (written and verbal) combined with outstanding presentation, leadership, and problem-solving skills.\nNice to Have\nExperience with SOAR platforms, security workflow automation, or complex API/tool integrations.\nWorking knowledge of query and scripting languages (e.g., KQL, SQL, Python).\nHands-on experience leveraging embedded AI capabilities in modern SIEM, SOAR, EDR, or XDR platforms.\nFamiliarity with industry frameworks such as MITRE ATT&CK, NIST CSF, and standard incident response lifecycles.\nCloud security monitoring experience across Microsoft Azure, AWS, or GCP.\nIndustry-recognized security certifications (e.g., CISSP, CISM, GCIH, or platform-specific certifications).\nManagement consulting background.\nProficiency in an additional European language (German, French, or Spanish).","description_format":"text","description_chars":2892,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"German","level":"All levels","optional":true},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","IT Outsourcing & Dedicated Teams","Managed IT Services (MSP)","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-09-30T15:06:15Z"},{"event":"close","at":"2026-10-09T13:11:27Z"},{"event":"reopen","at":"2026-10-15T13:11:33Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":0.9,"age_days":24,"expected_fill_days":47,"reasons":["conf:1","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/link-group-cyber-detection-response-engineering-lead-expert","json_url":"https://alion.io/job/link-group-cyber-detection-response-engineering-lead-expert.json","meta":{"generated_at":"2026-10-24T13:39:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19610,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":880},"rest":"https://alion.io/mcp/rest/get_company?id=880"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flink-group-cyber-detection-response-engineering-lead-expert"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flink-group-cyber-detection-response-engineering-lead-expert"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flink-group-cyber-detection-response-engineering-lead-expert"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/link-group-cyber-detection-response-engineering-lead-expert\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flink-group-cyber-detection-response-engineering-lead-expert"}]}