AI-Driven Threat Detection & Response Engineer

Old National Bank; Chicago (IL); On-site; USD 78,000 - 153,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Continuing education

Employee assistance program

Job summary

Old National Bank is seeking a Cybersecurity Detection and Response Engineer to lead security monitoring and response with a focus on Microsoft Sentinel and Defender XDR. You will develop detections, automate workflows, and support complex investigations across the SOC to improve speed and accuracy.

The role emphasizes collaboration with SOC, IT, and third parties, plus continuous improvement of telemetry and playbooks to advance security operations while supporting governance and regulatory

Qualifications

• Bachelor’s degree or equivalent experience in cybersecurity, IT, or CS.
• Minimum 4 years of cybersecurity experience including monitoring or incident response.
• Experience with Microsoft Sentinel and Defender XDR.
• Strong KQL, and ability to develop detection logic and dashboards.
• Scripting or automation experience (PowerShell, Python, APIs, Logic Apps).
• Familiarity with MITRE ATT&CK, endpoint security, and regulated environments.

Responsibilities

• Develop and maintain detection use cases based on threat intel and MITRE ATT&CK.
• Conduct validation testing, threat hunting, and red/purple-team exercises.
• Identify gaps and improve telemetry, coverage, and response processes.
• Partner with SOC analysts, IT, and third parties to improve investigations.
• Design and maintain Sentinel playbooks, Logic Apps, and automation workflows.
• Automate repetitive SOC processes to speed response and consistency.
• Support incident response with data analysis, evidence collection, and documenting learnings.
• Continuously improve monitoring, response, and AI-assisted workflows.

Skills

KQL

PowerShell

Python

APIs

Logic Apps

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience

Tools

Microsoft Sentinel

Microsoft Defender XDR

Logic Apps

Job description

Old National Bank is seeking a Cybersecurity Detection and Response Engineer to lead security monitoring and response with a focus on Microsoft Sentinel and Defender XDR. You will develop detections, automate workflows, and support complex investigations across the SOC to improve speed and accuracy.

The role emphasizes collaboration with SOC, IT, and third parties, plus continuous improvement of telemetry and playbooks to advance security operations while supporting governance and regulatory