Principal Security Engineer- Cyber Defense

AB Volvo; Greensboro (NC); On-site; USD 128,000 - 158,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

Generous paid time off

Competitive retirement matching

Volvo Group University - professional/

Work-life programs

Job summary

Volvo Group Greensboro, NC is seeking a Principal Security Engineer to join our global Cyber Defense Center. You will apply an Everything-as-Code approach to build and manage our software-defined security operations architecture, powering our detection and response platform end-to-end.

You will write detection logic, automate response, and tune security controls while partnering with cross-functional teams to translate analytics needs into working code and scalable architectures.

Qualifications

• Strong security engineering background with SOC/ SecOps experience.
• Proficiency in Python or PowerShell and APIs, data structures (JSON/YAML).
• Deep knowledge of security query languages (Splunk SPL, KQL, SQL) and Python/TypeScript.

Responsibilities

• Engineer Detection-as-Code and manage lifecycle via version control and CI/CD.
• Automate threat response with modular security playbooks.
• Tune XDR, firewalls, cloud security, and DLP to address new threats.
• Collaborate with cross-functional teams to meet analytical needs.
• Integrate contextual data models and threat intelligence for AI workloads.
• Develop detection and automation across SIEM, data lakes and S3.
• Close detection gaps with new rules and architectural designs.
• Maintain CI/CD pipelines with automated validation gates.

Skills

Collaboration & articulation

Core security expertise

Python

PowerShell

APIs

JSON / YAML

Splunk SPL

KQL

SQL

GitOps

CI/CD

XDR / EDR / NDR

Graph databases

AI / LLM integration

Docker

Terraform / IaC

C# / .NET

Tools

Docker

API Gateways

Terraform

Bicep

Neo4j

Cosmos DB Gremlin

Git

S3/Storage blobs

Job description

Select how often (in days) to receive an alert:

Principal Security Engineer- Cyber Defense

Location:

Greensboro, NC, US, 27409

Position Type: Professional

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.

We are seeking a Principal Security Engineer to join our global Cyber Defense Center (CDC) Engineering team. You will apply an Everything-as-Code approach to build and manage our software-defined security operations architecture, designing the logic and systems that power our global detection and response platform.

Key Responsibilities:

• Engineer Detection-as-Code: Write detection logic using KQL, SPL, SQL, and Python. Manage the lifecycle strictly through version control and CI/CD pipelines. Create new monitoring use cases based on red team exercises, CTIC reports, and your own hypothesis-driven threat research.
• Automate Threat Response: Build and integrate modular automation playbooks across the security stack to accelerate incident response.
• Optimize Security Controls: Configure and tune enterprise security controls (XDR, firewalls, cloud security, DLP) to adapt to new threats.
• Drive Capability Engineering: Partner with cross-functional teams to translate analytical needs into architecture and working code. Ensure engineering output directly supports frontline defenders without adding operational friction.
• Establish AI & Data Foundations: Integrate contextual data models (like knowledge graphs), API gateways, and threat intelligence pipelines to support our targeted AI and ML workloads.
• Leverage Hybrid Data Ecosystems: Develop detection and automation use cases across a variety of different data architectures (SIEM, data lakes, S3/Storage blobs, Federated Search).
• Mitigate Security Gaps: Mitigate detection and response gaps through the creation of new detection rules, improvement of processes, new architectural designs, and hand-over to other technical teams.
• Enforce Pipeline Quality: Build and maintain CI/CD pipelines with automated validation gates for secure content deployment. Use breach attack simulation & threat intelligence verification where applicable in larger validation workflows.

Who are you?

Do you dream big? We do too, and we are excited to grow together. In this role, you will bring:

• Collaboration & Articulation: Problem-solving mindset with the ability to bridge the gap between engineering and SOC operations effectively. Able to convey targeted messages to different audiences.
• Core Security Expertise: Strong background in SOC and/or SecOps engineering.
• Engineering Mindset: Proficiency in Python or PowerShell, software engineering best practices, APIs, and data structures (JSON/YAML).
• Query Mastery & Scripting: Deep proficiency in security query languages (Splunk SPL, KQL, SQL) and Python/TypeScript.
• GitOps & CI/CD: Hands-on experience with Git and CI/CD platforms for managing infrastructure and logic as code.
• Security Tooling: Technical experience configuring and administering enterprise security controls (XDR/EDR/NDR, Firewalls, Cloud Security, DLP, Identity).
• Data Modeling: Familiarity with Graph Databases (Neo4j, Cosmos DB Gremlin) and entity relationship modeling.
• Applied AI: Experience integrating LLMs or building RAG pipelines for enterprise use cases.
• Containerization & IaC: Experience with Docker, API Gateways, and Infrastructure-as-Code (Terraform/Bicep).
• Software Development: Experience working with compiled languages (C# / .NET).
• OT Security: Exposure to Operational Technology (OT) and manufacturing environments.

Ready for the next move?

Are you excited to bring your skills and disruptive ideas to the table? We can’t wait to hear from you.

At the Volvo Group, we strive for a clear, transparent, and straightforward compensation approach, motivating you to contribute to the company’s growth. For this position, the base pay is set at $128,300.00 - $158,400.00 annually, and where applicable, bonus eligible. The range for this role, as well as final salary offered, is determined by several factors including, but not limited to, geographic location, work-related knowledge, certifications, skills, education, and experience. In addition to these factors, we believe in the importance of pay equity and consider internal equity of our current team members as part of any final offer.

In addition to a solid package of compensation and benefits, plus you will enjoy:

• Competitive medical, dental and vision insurance.
• Generous paid time off.
• Competitive matching retirement savings plans.
• Working environment where your safety, health and wellbeing come first.
• Focus on professional and personal development through Volvo Group University.
• Programs that make today’s challenging reality of combining work and personal life easier.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability, or status as a protected veteran.

We value your data privacy and therefore do not accept applications via mail.

Volvo Group Digital Technology & Operations (DTO)is a new division established to integrate the capabilities of VG Digital & IT and VG Connected Solutions to accelerate the digital transformation in Volvo Group. The organizational set up is structured around domains, digital products with functions for digital excellence to deliver outstanding customer experience.

Joining the new DTO division means being part of a fast-moving digital product-oriented organization where teams truly own what they build from idea to delivery. In DTO, we work in agile, cross-functional teams, mastering the latest technology, and creating outstanding digital experiences that make a real difference for our colleagues and Volvo Group customers around the world. We put people first and build our culture on trust, passion, customer success, change, and performance. If you want to grow, collaborate across functions and entities, and help shape the future of digital products within Volvo Group, DTO is a great place to be.

Job Category: Security

Organization: Volvo Group Digital Technology & Operations

Every day, Volvo Group products and services ensure that people have food on the table, children arrive safely at school and roads and buildings can be constructed. Looking ahead,we are committed to driving the transition to sustainable and safe transport, mobility and infrastructure solutions toward a net-zero society.

Joining Volvo Group, you will work with some of the world’s most iconic brands and be part of a global and leading industrial company that is harnessing automated driving, electromobility and connectivity.

Our people are passionate about what they do, they aim for high performance and thrive on teamwork and learning. Everyday life at Volvo is defined by a climate of support, care and mutual respect.

If you aspire to grow and make an impact, join us on our journey to create a better and more resilient society for the coming generations.