Cyber Defense Detection & Response Engineer

Old National Bank; Tinley Park (IL); On-site; USD 78,000 - 153,000; Full time

Benefits offered by this job

Medical Insurance

401K

Education opportunities

Employee assistance program

Job summary

Old National Bank is seeking a Cybersecurity Detection & Response Engineer to advance security monitoring across locations including Plainfield, Tinley Park, and Chicago. The role focuses on Microsoft Sentinel and Defender XDR, building detections and automating response workflows.

You will collaborate with SOC, IT, and third-party providers, while applying AI-assisted analysis to improve speed, accuracy, and consistency in security operations.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or equivalent.
• Minimum 4 years in cyber security, monitoring, IR or detection engineering.
• Experience with Microsoft Sentinel and Defender XDR.
• Strong KQL skills and ability to develop detections.
• Scripting/automation experience (PowerShell, Python, APIs, Logic Apps).

Responsibilities

• Develop and maintain MITRE ATT&CK-based detections for SOC.
• Design Sentinel playbooks and automation to speed incident response.
• Lead investigations and support complex security events.
• Improve telemetry, coverage, and response processes.
• Align security operations with FFIEC, NIST, and banking requirements.

Skills

KQL

Detection engineering

Incident response

Security monitoring

MITRE ATT&CK knowledge

AI-assisted analysis interest

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Microsoft Sentinel

Microsoft Defender XDR

PowerShell

Python

APIs/Logic Apps

Automation tooling

Job description

Old National Bank is seeking a Cybersecurity Detection & Response Engineer to advance security monitoring across locations including Plainfield, Tinley Park, and Chicago. The role focuses on Microsoft Sentinel and Defender XDR, building detections and automating response workflows.

You will collaborate with SOC, IT, and third-party providers, while applying AI-assisted analysis to improve speed, accuracy, and consistency in security operations.