AI-Powered Detection & Response Engineer III

Upbound Group Inc.; Plano (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Upbound Group in Plano, TX is seeking a Cybersecurity Engineer III, Detection and Response to strengthen Security Operations with detection engineering, AI-assisted workflows, and incident response across cloud, identity, endpoint, and SaaS environments.

You will build, test, and maintain reliable monitoring, validate detections against MITRE ATT&CK, lead threat hunts, coordinate containment, and contribute to runbooks and metrics for detection improvements.

Qualifications

• Five or more years of relevant experience spanning security operations, detection engineering, and incident response.
• Hands-on experience with modern SIEM and XDR platforms and detection development.
• Experience with threat hunts across identity, endpoint, cloud, and SaaS environments.
• Experience using AI technologies for security investigations and automation.
• Proficiency with Python, APIs, and security telemetry integrations.
• Knowledge of vulnerability assessment and remediation coordination.

Responsibilities

• Design, develop, test, and tune detections mapped to MITRE ATT&CK and validate effectiveness.
• Build and operate AI-assisted security workflows and playbooks with human oversight.
• Conduct proactive threat hunting across multiple environments to identify gaps.
• Investigate complex incidents and coordinate containment and remediation.
• Engineer and maintain SIEM logging pipelines and telemetry quality.
• Coordinate monitoring requirements with cross-functional teams and runbooks.

Skills

Security operations

Detection engineering

Incident response

Python

APIs

Telemetry integrations

Tools

SIEM

XDR

APIs

Job description

Upbound Group in Plano, TX is seeking a Cybersecurity Engineer III, Detection and Response to strengthen Security Operations with detection engineering, AI-assisted workflows, and incident response across cloud, identity, endpoint, and SaaS environments.

You will build, test, and maintain reliable monitoring, validate detections against MITRE ATT&CK, lead threat hunts, coordinate containment, and contribute to runbooks and metrics for detection improvements.