Detection & Response Engineer: AI-Driven Security Ops

Old National Bank; Highland (IL); Hybrid; USD 78,000 - 153,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K

Continuing education

Employee assistance program

Job summary

Old National Bank is seeking a Cybersecurity Detection and Response Engineer to administer, engineer, and improve ONB’s security monitoring platforms, with a focus on Microsoft Sentinel and Microsoft Defender XDR. You will build and tune detections, support investigations, and automate security workflows.

The role collaborates with SOC analysts, IT teams, and third-party providers to improve investigation quality and operational outcomes, using AI-assisted analysis to speed responses and

Qualifications

• Bachelor's degree in cybersecurity, IT, CS or equivalent experience.
• 4+ years in cybersecurity, including monitoring, incident response, or detection engineering.
• Experience administering Microsoft Sentinel and Defender XDR.
• Strong KQL skills and experience developing detection logic, dashboards, or hunting queries.
• Experience with scripting/automation (PowerShell, Python, APIs, Logic Apps).
• Familiarity with MITRE ATT&CK and regulated environments.

Responsibilities

• Develop and maintain detection use cases based on threat intel and MITRE ATT&CK.
• Conduct validation testing, threat hunting, and red/purple-team activities.
• Identify monitoring gaps and improve telemetry and response processes.
• Partner with SOC analysts, IT teams, and third parties to improve investigations.

Skills

Detection engineering

Incident response

Automation

Communication

Education

Bachelor's degree in Cybersecurity/Information Technology/Computer Science

Tools

Microsoft Sentinel

Microsoft Defender XDR

KQL

PowerShell

Python

APIs

Logic Apps

Job description

Old National Bank is seeking a Cybersecurity Detection and Response Engineer to administer, engineer, and improve ONB’s security monitoring platforms, with a focus on Microsoft Sentinel and Microsoft Defender XDR. You will build and tune detections, support investigations, and automate security workflows.

The role collaborates with SOC analysts, IT teams, and third-party providers to improve investigation quality and operational outcomes, using AI-assisted analysis to speed responses and