Remote Director, Threat Detection & Engineering

Amtrak; Northern (KY); Hybrid; USD 179,000 - 232,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401K with Employer Match

Generous Paid Time Off

Rail Pass Privileges

Job summary

Amtrak is seeking a Director, DT Threat Detection & Engineering to oversee the development and continuous improvement of cyber threat detections, automation, and defense engineering across SOC, CTI, Threat Hunting, and Penetration Testing teams.

You will lead a team of detection and automation engineers, shaping strategy, roadmaps, and performance metrics to improve detection coverage and incident response effectiveness.

Qualifications

• Bachelor’s degree or equivalent combination of education, training, and/or relevant experience.
• 11+ years of cybersecurity experience including security operations, detection engineering, threat intelligence, or cyber defense.
• Experience leading technical cybersecurity teams and managing complex security engineering initiatives.
• Proficiency with software development methodologies, DevSecOps, and CI/CD pipelines.
• Experience with GitHub, source control management, and automated deployment frameworks.
• Knowledge of cloud platforms, APIs, automation frameworks, and enterprise integrations.

Responsibilities

• Develop and execute the strategic vision for Threat Detection & Engineering aligned with cybersecurity objectives.
• Lead detection engineers, automation engineers, and cyber defense developers to build scalable detections.
• Oversee SOAR workflows, automated response capabilities, and orchestration solutions.
• Collaborate with SOC leadership, CTI, Threat Hunting, and Red Team to operationalize intelligence.

Skills

Team leadership

DevSecOps

CI/CD pipelines

GitHub

Cloud platforms

MITRE ATT&CK

SIEM/SOAR

EDR/XDR

Threat detection

Threat intelligence

Education

Bachelor's Degree

Equivalent experience

Tools

GitHub

SOAR

EDR/XDR

CI/CD tools

APIs

Job description

Amtrak is seeking a Director, DT Threat Detection & Engineering to oversee the development and continuous improvement of cyber threat detections, automation, and defense engineering across SOC, CTI, Threat Hunting, and Penetration Testing teams.

You will lead a team of detection and automation engineers, shaping strategy, roadmaps, and performance metrics to improve detection coverage and incident response effectiveness.