Detection and Response Engineer at coalfire

Department: Advisory Services

Compensation

$80,000 – $134,000/yr

Setup: Remote
Type: Full-time
Level: mid
Posted: Jul 21, 2026

Description

Coalfire is hiring a Detection and Response Engineer for its Defensive Services team. The role focuses on SIEM monitoring and alerting, threat hunting, detection development, alert tuning, incident investigation, and purple-team activities across client environments. Candidates need 2–4 years of enterprise security experience, hands-on experience with at least two SIEM platforms, cloud security knowledge, incident-response and threat-hunting expertise, and at least one listed cybersecurity certification. The position offers a flexible work model and comprehensive insurance options.

Required Skills

SIEM monitoring
Threat hunting
Detection queries
Cloud security
Incident response
Threat intelligence
Detection-as-Code
NIST 800-53

Additional Information

Required Previous Experiences: 2–4 years of experience in large-scale enterprise security environments, including cloud-hosted or hybrid infrastructure
Hands-on experience with at least two SIEM platforms in a production detection and response environment
Experience monitoring, validating, and escalating SIEM alerts using documented runbooks, SLAs, and severity thresholds
Experience independently investigating and responding to security alerts across multiple log sources
Experience escalating confirmed or high-confidence incidents with timelines, evidence, and MITRE ATT&CK mapping
Experience conducting structured and cyclical threat-hunting activities
Experience utilizing a Detection-as-Code framework
Experience working with NIST 800-53 environments
Preferred Qualifications: Professional services background supporting external clients
Automation experience with GitLab or GitHub, Terraform, and Ansible
Understanding of FedRAMP, FISMA, HIPAA, HITRUST, PCI, and similar regulatory standards