Senior AI‑Driven Detection & Response Engineer

Acima; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Onsite five days a week

Job summary

Upbound Group seeks a Cybersecurity Engineer III, Detection and Response to strengthen security operations in Plano, TX. The role focuses on detection engineering, AI-assisted investigations, incident response, and telemetry engineering across cloud, identity, endpoint, network, SaaS, and AI-enabled environments.

You will partner with product and infrastructure teams to establish logging requirements, ingest pipelines, and actionable detections, while validating effectiveness through emulation

Qualifications

• Five or more years of relevant experience in security operations, detection engineering, and incident response.
• Hands-on experience with modern SIEM and XDR platforms and detection development.
• Experience with threat hunts across identity, endpoint, cloud, and SaaS environments (AWS/Azure/M365).
• Demonstrated ability to validate AI-assisted outputs and integrate security telemetry.
• Proficiency with Python, APIs, and security telemetry integrations.

Responsibilities

• Design, develop, test, and tune security detections as code aligned to MITRE ATT&CK.
• Build AI-assisted security workflows with controlled human decision points.
• Conduct proactive threat hunting across multiple environments.
• Independently investigate complex incidents and coordinate remediation.
• Engineer and maintain SIEM/XDR logging pipelines and telemetry ingestion.
• Validate vulnerabilities and coordinate remediation verification.
• Collaborate with teams to improve monitoring requirements and detections.
• Develop automation, runbooks, and operational security metrics.

Skills

SIEM/XDR platforms

Threat hunting

Python

APIs & telemetry

Cloud platforms (AWS/Azure)

Education

Bachelor's degree in CS or related field

Tools

Microsoft Entra ID

Microsoft 365

AWS

Azure

CI/CD tooling

Job description

Upbound Group seeks a Cybersecurity Engineer III, Detection and Response to strengthen security operations in Plano, TX. The role focuses on detection engineering, AI-assisted investigations, incident response, and telemetry engineering across cloud, identity, endpoint, network, SaaS, and AI-enabled environments.

You will partner with product and infrastructure teams to establish logging requirements, ingest pipelines, and actionable detections, while validating effectiveness through emulation