Lead Security Detection Engineer

American Electric Power Co.; Columbus (OH); On-site; USD 116,000 - 151,000; Full time

Job summary

American Electric Power (AEP) is seeking a Detection Engineer to join the Cybersecurity Intelligence and Defense team in Columbus, OH. You will design, develop, tune, and maintain threat detection capabilities across enterprise environments, collaborating with Threat Intelligence, Threat Hunters, IR, and SOC to evolve detections and reduce false positives.

The role emphasizes translating intel into actionable content, building rules and analytics, and mapping to MITRE ATT&CK while driving

Qualifications

• Bachelor's degree or equivalent in a related field or Cyber Security program
• 4+ years in security/IT/ cyber roles preferred
• Experience with threat intelligence, hunting, and incident response expected

Responsibilities

• Design, develop, test, and deploy detections across SIEM/EDR/NDR and cloud platforms
• Translate threat intel and hunting findings into detection content
• Create and maintain detection rules, correlations, analytics, and alerts
• Tune detections to improve fidelity and reduce false positives
• Map detections to MITRE ATT&CK and identify coverage gaps
• Collaborate with Threat Hunting and IR teams to improve effectiveness
• Develop use cases and strategies for emerging threats
• Analyze telemetry from endpoints, networks, cloud, and identity providers
• Measure detection performance and reporting
• Support purple team exercises and adversary emulation
• Maintain documentation and detection engineering processes
• Automate workflows where appropriate

Skills

Threat intelligence

Threat hunting

SOC

MITRE ATT&CK mapping

Security monitoring

Education

Bachelor's degree

Associates degree with relevant experience

Tools

SIEM

EDR

NDR

Cloud security

Job description

American Electric Power (AEP) is seeking a Detection Engineer to join the Cybersecurity Intelligence and Defense team in Columbus, OH. You will design, develop, tune, and maintain threat detection capabilities across enterprise environments, collaborating with Threat Intelligence, Threat Hunters, IR, and SOC to evolve detections and reduce false positives.

The role emphasizes translating intel into actionable content, building rules and analytics, and mapping to MITRE ATT&CK while driving