AI-Driven Cybersecurity Detection & Response Engineer

Old National Bank; Chicago (IL); On-site; USD 78,000 - 153,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Continuing education

Employee assistance program

Incentive plan

Job summary

Old National Bank is seeking a Cybersecurity Detection & Response Engineer to strengthen security monitoring across our SIEM and XDR platforms, with emphasis on Microsoft Sentinel and Defender XDR. You will build detections, tune alerts, and collaborate with SOC teams.

This full-time role is based on-site at Plainfield, Tinley Park, or Chicago, with additional opportunities in Indiana; you will automate workflows, support investigations, and help mature our security operations through AI-enabled

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or equivalent experience.
• 4+ years of cybersecurity experience including security monitoring, incident response, or detection engineering.
• Experience administering Microsoft Sentinel and Defender XDR technologies.
• Strong KQL skills and experience developing detection logic, dashboards, or hunting queries.
• Experience with scripting or automation such as PowerShell, Python, APIs, Logic Apps, or similar tools.
• Working knowledge of MITRE ATT&CK, endpoint security, log analysis, and regulated security environments.
• Interest in responsibly using AI-assisted tools to improve security operations, investigation, automation, and documentation.

Responsibilities

• Develop and maintain detection use cases based on threat intelligence and MITRE ATT&CK.
• Conduct validation testing, threat hunting, and red/purple-team exercises to evaluate detections.
• Identify monitoring gaps and implement improvements to coverage, telemetry, and response processes.
• Partner with SOC analysts, IT teams, and third-party providers to improve investigations and outcomes.
• Design and maintain Sentinel playbooks, Logic Apps, APIs, and automation workflows.
• Automate repetitive SOC processes to improve response speed, consistency, and analyst efficiency.
• Support incident response through data analysis, evidence collection, and investigative support.

Skills

KQL

Detection engineering

Incident response

Automation scripting

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Microsoft Sentinel

Microsoft Defender XDR

PowerShell

Python

APIs

Logic Apps

Job description

Old National Bank is seeking a Cybersecurity Detection & Response Engineer to strengthen security monitoring across our SIEM and XDR platforms, with emphasis on Microsoft Sentinel and Defender XDR. You will build detections, tune alerts, and collaborate with SOC teams.

This full-time role is based on-site at Plainfield, Tinley Park, or Chicago, with additional opportunities in Indiana; you will automate workflows, support investigations, and help mature our security operations through AI-enabled