P

Plain Concepts

Custom software and AI solution provider

Agentic Detection & Response Specialist

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeRemote in SpainNo salary listed

About the Job

Requirements

  • At least 6 years of experience in Security Operations Center (SOC) work, including experience managing Level 3 investigations or advanced escalations.
  • A strong background in incident response, threat hunting, detection engineering, and security operations.
  • Experience investigating threats across endpoint, identity, network, and cloud environments.
  • Hands-on experience with security information and event management (SIEM) and endpoint detection and response (EDR) or extended detection and response (XDR) technologies.
  • Strong query skills using Kusto Query Language (KQL), Search Processing Language (SPL), or similar languages.
  • Experience with Microsoft Sentinel, Microsoft Defender XDR, or equivalent security platforms.
  • Scripting and automation experience with Python, PowerShell, application programming interfaces (APIs), or security orchestration, automation, and response (SOAR) technologies.
  • Interest in applying artificial intelligence (AI) and agentic security concepts to real-world operations.
  • Ability to own initiatives from idea to implementation and collaborate across technical teams.
  • Fluency in Spanish and English.

Responsibilities

  • Lead complex incident investigations and advanced security escalations.
  • Analyze activity across endpoint, identity, network, cloud, and SIEM platforms to determine scope, impact, and response actions.
  • Design, build, and improve detection rules, correlation logic, and investigation queries.
  • Develop security automations, integrations, and SOAR playbooks to streamline operational workflows.
  • Collaborate with security architects and engineers to implement AI-assisted and agentic security capabilities.
  • Identify opportunities to apply AI for investigation support, enrichment, evidence summarization, and response recommendations.
  • Act as a technical reference for Level 1 and Level 2 analysts, improving escalations, procedures, and operational maturity.
  • Drive continuous improvement initiatives focused on reducing alert fatigue, increasing detection quality, and improving response efficiency.

Desired Qualifications

  • Experience with AWS security services.
  • Hands-on experience with Torq, Logic Apps, Azure Functions, or similar automation platforms.
  • Exposure to Security Copilot.
  • Experience in managed detection and response (MDR) or managed security service provider (MSSP) environments.
  • Exposure to AI-assisted investigations, large language models (LLMs), agents, or orchestration frameworks.

About the Company

Plain Concepts

Custom software and AI solution provider

Plain Concepts delivers customized technology solutions through project-based engagements in four areas: artificial intelligence, data and analytics, enterprise application development, and infrastructure modernization. It uses its strong Microsoft ecosystem knowledge and partnership as a Microsoft AI and Cloud Partner to create tailored applications for clients. The firm offers products such as Evergine, a graphics engine for industrial digital twins and immersive 3D experiences, and SIDDI, an AI-powered platform that improves visual content accessibility for people with sensory impairments. With nearly 500 professionals worldwide, the company focuses on helping clients transform through technology while advancing digital inclusion and efficiency.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Cordoba, Argentina
Founded
2006

Recently Posted Jobs

Explore more opportunities at Plain Concepts

See more jobs