[Remote] Senior/Lead Security Engineer (Detection & Response)

Note: The job is a remote job and is open to candidates in USA. Fuse Energy is hiring a Senior or Lead Security Engineer (Detection & Response) to build and own security monitoring and detection across its IT and cloud environment. The role includes developing telemetry, leading investigations and incident response, automating security operations, and working with IT and Engineering to strengthen systems and controls.

Responsibilities

• Own security monitoring and detection across AWS, identity, endpoints, SaaS, networks and data center environments
• Build and maintain the telemetry and logging pipelines needed to detect security incidents, and continuously test and improve detection coverage
• Lead security investigations and incident response from detection through containment, recovery and post-mortem
• Proactively hunt for threats and identify gaps in our visibility, controls and detection coverage
• Build automation to improve detection, investigation and response, making effective use of AI and emerging tools to improve efficiency and capabilities
• Work closely with IT and Engineering to turn security findings into preventative controls and better system design
• Develop and test incident response playbooks and continuously improve our response capability
• Implement and enhance internal AI agents and security bots that assist with monitoring, investigations, reporting, and other security operation tasks

Skills

• Significant hands-on experience in detection engineering, security engineering, incident response, threat hunting or a similar technical role
• Strong understanding of cloud environments, ideally AWS, and how to monitor them for unauthorised or suspicious activity
• Strong networking fundamentals and an understanding of how attackers move through networks and systems
• Strong understanding of attacker tradecraft and the ability to turn it into useful, high-signal detections
• Experience investigating real security incidents and taking ownership through to resolution
• Strong scripting or programming skills, ideally Python, and a habit of automating repetitive work
• Experience with security monitoring and response tooling such as SIEM, EDR, SOAR or equivalent
• Strong systems thinking and a natural instinct for asking "how would we know if this was compromised?"
• Comfortable working autonomously and closely with IT and Engineering teams
• Curious about emerging AI capabilities and proactive in experimenting with AI-assisted development, automation and security workflows
• AWS security telemetry including CloudTrail, GuardDuty, VPC Flow Logs and IAM
• Detection-as-code, Sigma, Git-based detections and automated testing
• CrowdStrike, SentinelOne, Defender or another EDR
• Network security monitoring, PCAP, NetFlow/sFlow or firewall telemetry
• Digital forensics, threat intelligence, purple teaming or security validation
• Data centre or colocation security, including OOB networks and BMC/IPMI
• Security automation, AI-assisted development or applying AI/LLMs to security engineering and operations
• Energy, trading, fintech, critical infrastructure or other high-value-target environments

Benefits

• Eligibility for equity
• Biannual bonus scheme
• Fully expensed tech to match your needs
• Private health insurance
• Breakfast and dinner allowance for office-based employees

Company Overview