Senior AI-Driven Threat Detection & Red Team Engineer

CO1000 CDW, LLC; Illinois; Hybrid; USD 137,000 - 191,000; Full time

Job summary

CDW is seeking a Senior Threat Engineer to lead AI-powered detection and response within the Enterprise Defense & Automation team. You will build autonomous defenses, run continuous adversary emulation, and drive measurable outcomes like mean time to detect and contain.

The role blends threat detection, adversary emulation, and applied AI, requiring hands-on engineering, threat research, and collaboration with security platform owners to push security operations forward.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity.
• Minimum 7+ years in threat detection engineering, hunting, or related roles, or 11+ years overall.
• Hands-on experience with SIEM and cloud security tooling.
• Proficiency with MITRE ATT&CK mapping and security automation.
• Experience with adversary emulation and red-teaming.
• Strong Python programming for automation.

Responsibilities

• AI-Powered Detection & Response — develop detections across identity, endpoint and cloud with automated responses.
• Continuous AI Red Teaming — automate adversary emulation against production controls.
• Threat Research & Hunting — translate intelligence into detections and plans.
• Detection Engineering as Code — CI/CD pipelines and automation for detections.
• Collaboration & Influence — partner with Threat Response and platform owners; document decisions.

Skills

Threat detection engineering

Threat hunting

Incident response

Offensive security

Python

AI/ML or LLM

Security automation

Education

Bachelor's degree in cybersecurity or related field

Tools

SIEM platforms

Cloud security tooling

Adversary emulation tools

MITRE ATT&CK

Job description

CDW is seeking a Senior Threat Engineer to lead AI-powered detection and response within the Enterprise Defense & Automation team. You will build autonomous defenses, run continuous adversary emulation, and drive measurable outcomes like mean time to detect and contain.

The role blends threat detection, adversary emulation, and applied AI, requiring hands-on engineering, threat research, and collaboration with security platform owners to push security operations forward.