Agentic Detection & Response Specialist

Join Plain Security Studios as an Agentic Detection & Response Specialist, where you'll lead complex incident investigations, analyze activity across various platforms, and design and improve detection rules. You'll collaborate with security architects and engineers, identify opportunities to apply AI, and act as a technical reference for L1 and L2 analysts. Enjoy a competitive salary, flexible work hours, remote work options, and a range of benefits including free medical and dental insurance, training budget, and gym discounts.

• Conduire des enquêtes complexes sur les incidents et des escalades de sécurité avancées.
• Analyser l'activité sur les plateformes de point de terminaison, d'identité, de réseau, de cloud et de SIEM pour déterminer l'étendue, l'impact et les actions de réponse.
• Collaborer avec les architectes et les ingénieurs en sécurité pour mettre en œuvre des capacités de sécurité assistées par l'IA et agentiques.

• Scripting and automation experience with Python, PowerShell, APIs, or SOAR technologies
• Experience investigating threats across endpoint, identity, network, and cloud environments
• Ability to own initiatives from idea to implementation and collaborate across technical teams
• Experience with Microsoft Sentinel, Microsoft Defender XDR, or equivalent security platforms
• Interest in applying AI and Agentic Security concepts to real-world operations
• Strong background in Incident Response, Threat Hunting, Detection Engineering, and Security Operations
• Hands-on experience with SIEM and EDR/XDR technologies
• Fluent Spanish and English
• Strong query skills using KQL, SPL, or similar languages
• 6+ years of experience in Security Operations (SOC) with solid experience managing L3 investigations or advanced escalations
• Experience with AWS security services
• Hands-on experience with Torq, Logic Apps, Azure Functions, or similar automation platforms
• Security Copilot exposure
• Experience in MDR/MSSP environments
• Exposure to AI-assisted investigations, LLMs, agents, or orchestration frameworks