AI-Driven Threat Engineer: Rapid Detection & Red Teaming

CDW; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

CDW is seeking a Senior Threat Engineer to design AI-powered detection and autonomous response capabilities. You will compress attacker dwell time with high‑fidelity detections across identity, endpoints, cloud, and SaaS, paired with automated containment actions.

You will lead continuous AI red teaming, emulation against production controls, and translate intelligence into detections and responses while using AI to improve signal fidelity and reduce alert volume.

Qualifications

• Strong threat fundamentals and modern detection/response platform knowledge.
• Experience building detections and automated responses across identity, endpoint, network, cloud, and SaaS.
• Hands-on adversary emulation and red-teaming at attacker speed.

Responsibilities

• Engineer high‑fidelity detections with automated response paths for containment.
• Apply AI/ML to triage, correlate, and enrich alerts at machine speed.
• Build autonomous response playbooks to isolate hosts, revoke sessions, and quarantine content.
• Implement guardrails: confidence thresholds, blast-radius controls, and safe rollback for automations.
• Instrument detection/response for metrics like mean time to detect and ATT&CK coverage.
• Use LLMs and agentic tooling to summarize investigations and draft containment plans.

Skills

Threat fundamentals

Detection engineering

Adversary emulation

Applied AI

MITRE ATT&CK

AI tooling

Tools

AI/ML tooling

LLMs

Agentic tooling

Job description

CDW is seeking a Senior Threat Engineer to design AI-powered detection and autonomous response capabilities. You will compress attacker dwell time with high‑fidelity detections across identity, endpoints, cloud, and SaaS, paired with automated containment actions.

You will lead continuous AI red teaming, emulation against production controls, and translate intelligence into detections and responses while using AI to improve signal fidelity and reduce alert volume.