Senior AI‑Driven Detection & Response Engineer

Upbound Field Support Center Rent A Center Texas LP; United States; On-site; USD 130,000 - 170,000; Full time

Job summary

Upbound Group's Plano, TX Security Operations team seeks a Cybersecurity Engineer III, Detection and Response, to advance our detection engineering, AI-assisted operations, and incident response capabilities.

You will implement reliable detections across cloud, identity, endpoint, network, SaaS, and AI-enabled environments, partnering with engineering and product teams to define logging requirements and build robust ingestion pipelines.

Qualifications

• Five or more years of relevant experience spanning security operations, detection engineering, and incident response.
• Hands‑on experience with modern SIEM and XDR platforms, including detection development and tuning.
• Threat hunts and investigations across identity, endpoint, cloud, and SaaS environments (Microsoft Entra ID, Microsoft 365, AWS, Azure).
• Experience using AI technologies for security investigations, detection engineering, or automation.
• Proficiency with Python, APIs, and security telemetry integrations.

Responsibilities

• Design, develop, test, and tune security detections as code, mapped to MITRE ATT&CK.
• Build and operate AI-assisted security workflows and response playbooks with human checks.
• Conduct proactive threat hunting across multiple environments.
• Coordinate containment, root cause analysis, and remediation during complex incidents.
• Maintain SIEM logging pipelines and ensure telemetry quality for new projects.
• Validate vulnerabilities and coordinate remediation verification while fixes are applied.
• Collaborate with security and product teams to improve monitoring requirements.

Skills

Security operations

Detection engineering

Incident response

Threat hunting

Python

APIs

Security telemetry

Executive communication

Tools

SIEM platforms

XDR platforms

Microsoft Entra ID

AWS

Azure

Job description

Upbound Group's Plano, TX Security Operations team seeks a Cybersecurity Engineer III, Detection and Response, to advance our detection engineering, AI-assisted operations, and incident response capabilities.

You will implement reliable detections across cloud, identity, endpoint, network, SaaS, and AI-enabled environments, partnering with engineering and product teams to define logging requirements and build robust ingestion pipelines.