Security Spec Lead

American Electric Power Co.; Columbus (OH); On-site; USD 116,000 - 151,000; Full time

Job summary

American Electric Power (AEP) is seeking a Detection Engineer to join the Cybersecurity Intelligence and Defense team in Columbus, OH. You will design, develop, tune, and maintain threat detection capabilities across enterprise environments, collaborating with Threat Intelligence, Threat Hunters, IR, and SOC to evolve detections and reduce false positives.

The role emphasizes translating intel into actionable content, building rules and analytics, and mapping to MITRE ATT&CK while driving

Qualifications

• Bachelor's degree or equivalent in a related field or Cyber Security program
• 4+ years in security/IT/ cyber roles preferred
• Experience with threat intelligence, hunting, and incident response expected

Responsibilities

• Design, develop, test, and deploy detections across SIEM/EDR/NDR and cloud platforms
• Translate threat intel and hunting findings into detection content
• Create and maintain detection rules, correlations, analytics, and alerts
• Tune detections to improve fidelity and reduce false positives
• Map detections to MITRE ATT&CK and identify coverage gaps
• Collaborate with Threat Hunting and IR teams to improve effectiveness
• Develop use cases and strategies for emerging threats
• Analyze telemetry from endpoints, networks, cloud, and identity providers
• Measure detection performance and reporting
• Support purple team exercises and adversary emulation
• Maintain documentation and detection engineering processes
• Automate workflows where appropriate

Skills

Threat intelligence

Threat hunting

SOC

MITRE ATT&CK mapping

Security monitoring

Education

Bachelor's degree

Associates degree with relevant experience

Tools

SIEM

EDR

NDR

Cloud security

Job description

Job Summary

We are seeking a highly motivated Detection Engineer to join our Cybersecurity Intelligence and Defense team. The Detection Engineer will be responsible for designing, developing, tuning, and maintaining threat detection capabilities across enterprise environments. This role works closely with Threat Intelligence Analysts, Threat Hunters, Incident Responders, and Security Operations Center (SOC) personnel to identify emerging threats and improve the organization’s ability to detect malicious activity.

Job Description

The ideal candidate possesses a strong understanding of adversary tactics, techniques, and procedures (TTPs), security monitoring technologies, and data analysis. This individual will play a critical role in advancing detection coverage, reducing false positives, and improving overall cyber resilience.

What you’ll do:

Essential Job Functions & Tasks

• Design, develop, test, and deploy security detections across SIEM, EDR, NDR, cloud, and other security platforms.

• Translate threat intelligence and threat hunting findings into actionable detection content.

• Create and maintain detection rules, correlation searches, behavioral analytics, and alerting mechanisms.

• Tune existing detections to improve fidelity and reduce alert fatigue.

• Map detections to the MITRE ATT&CK framework and identify coverage gaps.

• Collaborate with Threat Hunting and Incident Response teams to improve detection effectiveness.

• Develop use cases and detection strategies for emerging threats and adversary behaviors.

• Analyze security telemetry from endpoints, networks, cloud environments, and identity providers.

• Measure and report on detection performance, effectiveness, and coverage.

• Support purple team exercises, tabletop exercises, and adversary emulation activities.

• Maintain documentation, detection standards, and engineering processes.

• Automate detection engineering workflows where appropriate.

Nice to have:

Licenses and Certifications:

CSFA, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCIP, GCTI, GDAT, GICSP, GMON, GOSI, GREM, GRID, GSOM, GXPN, OSCP, OSEE, Treadstone Certified Threat Intelligence Analyst/Certified Threat Counterintelligence Analyst, CERT Incident Response Process Professional, CREST Certified Host Intrusion Analyst, CREST Certified Incident manager, CREST Certified malware Reverse Engineer, CREST Certified Network Intrusion Analyst, CREST Certified Threat Intelligence Manager

Experience:

• Detection Engineer

• Incident Response Analyst

• CIRC/SOC Lead

• Threat Intelligence or Counterintelligence Analyst

• Cyber Threat Hunt Analyst

• Malware Reverse Engineer

• Clearance: Current government security clearance or ability to obtain a security clearance at a minimum of the Secret level.

What We’re Looking For:

Education requirements are listed below:

• Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) or NERC CIP compliance; OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cyber Security Program; alternatively,may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment).

Work Experience requirement listed below:

• 7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above; OR NERC-CIP compliance in addition to any experience identified above.

At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Compensation

$116,255.00 - $151,132.50

Physical Demands

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

Equal Employment Opportunity

It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.

“AEP offers an outstanding group of people to be a part of. The AEP culture values your integrity and awards your hard work.”

The Security Operations and Event Monitoring Center (SOEMC) is an industry leading operations center that plays a vital role in keeping AEP safe and compliant. An Event Monitoring Center Rep will answer alarms and phone calls to help protect AEP assets, assist internal customers, and be the face of AEP Security. The SOEMC monitors alarms throughout AEP’s footprint at a variety of facilities, answers the corporate Security hotline, and helps maintain NERC CIP compliance. This Event Monitoring Center Rep will provide training and oversight to other SOEMC members and terminals to ensure AEP Security standards are being met. Functions without direct supervision; writes and maintains clearly defined procedures, responds to higher level internal customer security needs and assists with automating alarms using monitoring software. Handles advanced level problems and tracks solution options based on criticality.

Responsible for moderate-scale security assignments with limited direction from senior team members. Develops and maintains necessary documentation of security systems, projects, and/or processes to ensure unified understanding of system details. Performs and analyzes security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Identifies and documents potential mitigations/remediations and creates reports of findings with identified risk response. Participates in the review, evaluation, and recommendation of emerging security technologies. More involved in advanced level implementation, support, and/or usage of technical solutions. Assists with problem solving, decision-making, and functional area knowledge.

American Electric Power (AEP) is seeking a Senior Security Specialist to support enterprise physical security systems, regulatory compliance programs, security reporting, and operational performance management.This position serves as a technical and compliance lead for Physical Security, with responsibility for administering security technology platforms, managing compliance activities, maintaining regulatory documentation, supporting audits, tracking mitigation plans, overseeing preventive maintenance programs, and developing operational and compliance reporting.

AEP offers generous time off, competitive pay, and educational opportunities to help employees advance their careers.

Our culture is purpose-driven and team-oriented: we combine innovation with a customer-first focus to deliver reliable energy and brighter futures.