• Architect, maintain and iteratively improve Expel's ability to detect and investigate threats using integrated technologies with limited direction. • Continuously improve Expel’s detection strategy and capability through creation of detections for Expel’s proprietary rule engine. • Maintain documentation in support of Expel’s detection and response content. • Improve SOC analyst efficiency by automating investigative workflows using an orchestration framework written in Python. • Collaborate with engineering on Expel’s integrations and engineering standards associated with each class of integration. • Evaluate technology APIs to design detection and response solutions to drive value and efficiency in Expel’s Workbench platform. • Contribute to and thrive in a culture of experimentation, agile, quality and continuous improvement among the team. • Take a leading role in the team’s research and monitoring of the latest threat landscape and subsequent detection and response automation development. • Communicate effectively with stakeholders on support requests surfaced to the D&R engineering team. • Mentor less experienced team members and SOC analysts. • Bridge the Engineering to effectively identify new platform features and tools to better enable the growth of our detection and response capabilities.