Remote Jobs Banking & Financial Services Fashion, Lifestyle & Beauty

Detection and Response Engineer (Remote) at Moniepoint Incorporated

Posted

About the role

Moniepoint Incorporated is a global business payments and banking platform serving over 600,000 businesses. We are seeking an experienced Detection and Response Engineer to join our Incident Response team. This role is ideal for a professional who has moved beyond first-line triage and wants to lead investigations from start to finish. You will use your findings to improve our detection capabilities and automate response workflows.

Responsibilities

  • Own escalated security incidents end-to-end, including scoping, evidence collection, threat analysis, containment, and remediation.
  • Analyze and reverse engineer malware to extract Indicators of Compromise (IOCs) and identify Tactics, Techniques, and Procedures (TTPs).
  • Conduct threat hunting using existing detection content, threat intelligence, and hypothesis-driven analysis.
  • Write, test, and deploy detection rules (YARA-L or equivalent) through the team’s CI/CD Detection-as-Code pipeline.
  • Tune existing detections to reduce false positives based on incident and hunting findings.
  • Build and maintain SOAR playbooks and security automation, including AI-driven workflows, to automate alert triage and enrich investigations.
  • Work cross-functionally with cloud security, infrastructure, and development teams to close systemic gaps.
  • Ensure IR and detection engineering practices align with PCI-DSS, ISO 27001, and NIST CSF 2.0.
  • Drive log source onboarding and ingestion health across enterprise applications and cloud environments.

Requirements

  • Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent hands-on experience).
  • 2 – 4 years of experience in incident response, SOC operations, or detection engineering.
  • Demonstrated experience writing or tuning detection rules in a SIEM (Google SecOps, or similar) using a rule language such as YARA-L, CQL, KQL, or Sigma.
  • Solid experience with SIEM and EDR platforms, log analysis, and end-to-end incident triage/investigation.
  • Working knowledge of MITRE ATT&CK and how it maps to detection coverage.
  • Comfortable with Python, JavaScript, or a similar scripting language for automation and detection support work.
  • Strong written communication skills for incident reports and detection documentation.

How to apply

Interested and qualified candidates should click here to apply online.

Apply on the employer’s website →