Cyber Defense Engineer II: SIEM, EDR & Automation

Credit Acceptance Corporation; Bellevue (WA); Hybrid; USD 102,000 - 142,000; Full time

Benefits offered by this job

401(K) match

Adoption assistance

Tuition reimbursement

Medical/dental/vision

Great Place to Work benefits

Job summary

Credit Acceptance Corporation is seeking a cybersecurity engineering professional to join a team focused on enterprise defense across endpoints, networks, and cloud. The role emphasizes incident response, automation, IaC, and cross-team collaboration to secure critical platforms.

The position offers a hybrid schedule with two remote days and three in office days weekly at a local office, a competitive base salary, and a 7.5–15% annual incentive based on performance.

Qualifications

• Bachelor’s degree in computer science, information systems, cybersecurity, or related field or equivalent experience.
• Minimum 2 years in cybersecurity engineering or related technical field.
• Experience triaging cybersecurity alerts or incidents and supporting containment actions.
• Hands-on with enterprise security platforms (SIEM, EDR, WAF, automation, or detection engineering).
• Experience with scripting/automation languages and APIs/webhooks.
• Experience with version control and Infrastructure as Code concepts.
• Knowledge of cloud services, cloud security logs, and secure authentication.
• Candidates must reside in or relocate to the greater Southfield MI, Bellevue WA, or San Francisco Bay Area CA.

Responsibilities

• Operate, maintain, and improve enterprise Cyber Defense platforms across endpoints and networks.
• Maintain SIEM integrations; onboard telemetry and resolve data-quality issues.
• Support endpoint detection and response capabilities; assist investigations and containment.
• Manage secure web access policies; troubleshoot access and performance issues.
• Collaborate on web application protections with security and engineering teams.
• Triage cybersecurity alerts; gather evidence, document findings, and escalate as needed.
• Develop and tune detection logic to improve signal quality and investigative value.
• Build response playbooks and automate repeatable investigation tasks using scripting, APIs, and webhooks.
• Use Infrastructure as Code and version control; follow change-management in Cyber Defense resources.
• Monitor platform health; maintain documentation; participate in security projects and on-call rotation.

Skills

Cybersecurity engineering

Security operations

Incident response

APIs & webhooks

Automation scripting

Infrastructure as Code

Cloud security

Documentation

Education

Bachelor’s degree in computer science or related field

Tools

SIEM

EDR

WAF

Automation tools

APIs

Version control

Job description

Credit Acceptance Corporation is seeking a cybersecurity engineering professional to join a team focused on enterprise defense across endpoints, networks, and cloud. The role emphasizes incident response, automation, IaC, and cross-team collaboration to secure critical platforms.

The position offers a hybrid schedule with two remote days and three in office days weekly at a local office, a competitive base salary, and a 7.5–15% annual incentive based on performance.