Agentic Detection & Response Specialist, Plain Concepts

• 6+ years of experience in Security Operations (SOC) with solid experience managing L3 investigations or advanced escalations
• Strong background in Incident Response, Threat Hunting, Detection Engineering, and Security Operations
• Experience investigating threats across endpoint, identity, network, and cloud environments
• Hands-on experience with SIEM and EDR/XDR technologies
• Strong query skills using KQL, SPL, or similar languages
• Experience with Microsoft Sentinel, Microsoft Defender XDR, or equivalent security platforms
• Scripting and automation experience with Python, PowerShell, APIs, or SOAR technologies
• Interest in applying AI and Agentic Security concepts to real-world operations
• Ability to own initiatives from idea to implementation and collaborate across technical teams
• Fluent Spanish and English

Desirable

• At Plain Security Studios, we're transforming traditional SOC capabilities through automation, AI-assisted investigations, and agentic security workflows
• As an Agentic Detection & Response Specialist, you'll combine advanced threat investigations with security automation, detection engineering, and AI-driven response capabilities, helping build the next generation of security operations
• Lead complex incident investigations and advanced security escalations
• Analyze activity across endpoint, identity, network, cloud, and SIEM platforms to determine scope, impact, and response actions
• Design, build, and improve detection rules, correlation logic, and investigation queries
• Develop security automations, integrations, and SOAR playbooks to streamline operational workflows
• Collaborate with security architects and engineers to implement AI-assisted and agentic security capabilities
• Identify opportunities to apply AI for investigation support, enrichment, evidence summarization, and response recommendations
• Act as a technical reference for L1 and L2 analysts, improving escalations, procedures, and operational maturity
• Drive continuous improvement initiatives focused on reducing alert fatigue, increasing detection quality, and improving response efficiency

• The selection process: Simple, just 3 steps:
• Phone screen
• 2 interviews with the team