As a Lead Staff Cybersecurity Engineer-Incident Response , you will serve as the technical lead for our Security Operations Center and drive the maturity of our threat detection and response capabilities. This role focuses on detection engineering, threat hunting, and incident leadership across enterprise, cloud, OT, and identity environments. The ideal candidate will design and tune detection logic, improve security telemetry coverage, and guide analysts during complex investigations while partnering with infrastructure and platform engineering teams to strengthen overall security visibility. You will report directly to our Sr. Cyber Security Manager, and you'll?work remotely.

Key Responsibilities

Act as the? technical lead and escalation point for the SOC , guiding analysts during complex investigations and major incidents.

Design, implement, and tune? threat detections across SIEM, EDR/XDR, and other security telemetry platforms .

Lead and coordinate? incident response activities , including investigation, containment, eradication, and recovery.

Develop? detection engineering practices ?aligned with adversary behaviors and frameworks such as? MITRE ATT&CK .

Conduct? proactive threat hunting ?and continuously improve detection coverage.

Build and maintain? automation, enrichment pipelines, and response playbooks ?to improve SOC efficiency and investigation speed.

Collaborate with infrastructure, network, cloud, and platform engineering teams to ensure? high-quality security telemetry and monitoring coverage .

Define and track? SOC performance metrics ?(alert fidelity, MTTD, MTTR) and lead initiatives to improve detection quality.

Responsibilities

Qualifications

YOU MUST HAVE

7-10+ years of experience in? cybersecurity, security operations, detection engineering, or incident response .

Strong experience with? SIEM platforms ?such as Splunk, Microsoft Sentinel, Elastic, or QRadar.

Hands-on experience with? EDR/XDR platforms ?and endpoint investigation workflows.

Deep understanding of? attack techniques, threat detection methodologies, and adversary tactics .

Experience developing? detection rules, correlation logic, and behavioral analytics .

Strong scripting or automation skills using? Python, PowerShell, or similar languages .

Solid understanding of? network security, enterprise infrastructure, and cloud environments (AWS, Azure, or GCP) .

WE VALUE

Experience building or maturing a? detection engineering or SOC program .

Experience with? security automation and SOAR platforms .

Familiarity with? threat intelligence integration and threat hunting methodologies .

Knowledge of? cloud-native security monitoring and identity telemetry .

Relevant certifications such as? GCIA, GCIH, GCED, CISSP, or similar .

Active security clearance

U.S. PERSON REQUIREMENTS

Due to compliance with U.S. export control laws and regulations, candidate must be a U.S. person, which is defined as, a U.S. citizen, a U.S. permanent resident, or have protected status in the U.S. under asylum or refugee status.

COMPENSATION

The annual base salary range for this position is $183k-$250k . Please note that this salary information serves as a general guideline. Solstice Advanced Materials considers various factors when extending an offer, including but not limited to the scope and responsibilities or the position, the candidate's work experience, education and training, key skills, as well as market and business considerations.

BENEFITS OF WORKING FOR SOLSTICE ADVANCED MATERIALS

In addition to a competitive salary, leading-edge work, and developing solutions side-by-side with dedicated experts in their fields, Solstice Advanced Materials employees are eligible for a comprehensive benefits package. This package includes employer-subsidized Medical, Dental, Vision, and Life Insurance; Short-Term and Long-Term Disability; 401(k) match, Flexible Spending Accounts, Health Savings Accounts, EAP, and Educational Assistance; Parental Leave, Paid Time Off (for vacation, personal business, sick time, and parental leave), and 12 Paid Holidays. For more information visit: click here

About Us

About Solstice Advanced Materials

Solstice Advanced Materials is a leading global specialty materials company that advances science for smarter outcomes. Solstice offers high-performance solutions that enable critical industries and applications, including refrigerants, semiconductor manufacturing, data center cooling, nuclear power, protective fibers, healthcare packaging and more. Solstice is recognized for developing next-generation materials through some of the industry's most renowned brands such as Solstice®, Genetron®, Aclar®, Spectra®, Fluka, and Hydranal. Partnering with over 3,000 customers across more than 120 countries and territories and supported by a robust portfolio of over 5,700 patents, Solstice's approximately 4,000 employees worldwide drive innovation in materials science. For more information, visit Advanced Materials (https://advancedmaterials.honeywell.com/us/en) .

Job Identification 106599

Job Category Engineering

Job Schedule Full time

Locations 115 Tabor Rd, Morris Plains, NJ, 07950, US 1213 West Morehead Street - Suite 526, Charlotte, NC, 28208, US

1334 Brittmoore Rd Ste 240, Houston, TX, 77043, US Hire Eligibility Internal and External

Relocation Package None

Pay Transparency $183k-$250k

US Person Must be a US Citizen due to contractual requirements

Solstice Advanced Materials

New Jobs

Lead Staff Cybersecurity Engineer-Incident Response