Senior Detection & Response Engineer
Expel·Remote·Remote·Posted 26 September 2026
About the role
You're the detection engineer people turn to when they ask "what does Microsoft actually see here?" Not the marketing-slide answer, the real map. Which product emits which telemetry, any anticipated ingestion lags, what table or API it lands in, which license tier gates it, how long it survives before it ages out, and where the documentation quietly disagrees with reality. When a new technique drops, your first instinct is to ask which Microsoft signal would catch it, and whether customers have it switched on. You also know Microsoft never sits still. Hunting tables appear, columns get renamed, Graph versions retire, capability shuffles between SKUs, previews go GA, features quietly vanish, and native alert logic shifts underneath you. You've got a repeatable way of staying ahead of that churn instead of finding out when a detection stops firing. You're comfortable behind a command line and in front of a customer, including scenarios where the conversation isn’t pleasant. If that's you, we'd love to talk! We have an amazing team and believe you'll love getting to know us. At Expel, we help businesses bridge the cybersecurity talent gap by providing transparent Managed Detection…
This is a summary of the advert. The full description and the application are on Expel's careers site.
Apply faster with Prepper
- A version of your CV tailored to this Senior Detection & Response Engineer role.
- A cover letter written from your CV and this advert.
- Prepper can fill in Expel's application form and send it once you approve.
- The application saved in your tracker, with reminders to follow up.
More roles at Expel
Prepper is independent and not affiliated with Expel. Roles are listed from the employer's public careers system and removed when they close.