Senior Detection Engineer - Hybrid Work & AI-Driven Security

Cboe Global Markets, Inc.; Chicago (IL); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Generous paid time off

Hybrid work environment

Health, dental, vision benefits

401(k) match

Tuition assistance

Parental leave

Referral program

Job summary

Cboe Global Markets, Inc. is seeking a Senior Detection Engineer to design and validate production detections across SIEM, EDR, cloud, and identity systems.

You will develop tooling for adversary simulations and repeatable validation, while advancing automation and AI-assisted workflows to shorten detection cycles. The role requires strong scripting skills, deep telemetry knowledge, and experience with Windows/AD, cloud platforms, and security testing.

Qualifications

• 5+ years of hands-on security engineering experience with substantial detection authoring content
• Strong command of at least one detection query language (KQL, Sigma, YARA-L, or equivalent)
• Practical knowledge of attacker techniques across Windows and cloud platforms at execution mechanics level
• Ability to read unfamiliar exploit or malware code and identify detectable artifacts
• Fluency in at least one tooling language (Python, Go, C#, PowerShell, bash)
• Working knowledge of telemetry: Windows event logs, EDR, cloud audit logs, identity sign-in data
• Comfort building test infrastructure using virtualization, containers, IaC, and CI/CD
• Disciplined approach to false positives and alert quality
• Clear technical writing for engineers and response guidance
• High ethical standards around authorization, scope, blast radius, and sensitive data handling
• Bachelor’s degree or equivalent practical experience

Responsibilities

• Write, tune, and maintain production detection logic across SIEM, EDR, identity, and cloud platforms with high fidelity
• Validate every detection by executing the targeted technique before production
• Build internal tooling to simulate adversary behavior for repeatable detection testing
• Create reusable validation packages and automated regression tests after agent/platform/config changes
• Operate sandbox and detonation infrastructure for exploit triage and malware analysis
• Evaluate new exploit PoCs for telemetry and effectiveness, translating to detections
• Produce threat hunting validation content with seeded artifacts and known-truth datasets
• Automate repeatable work: scheduled technique execution, telemetry collection, coverage reporting
• Apply AI/LLM tooling to shorten cycle time in triage, analysis, and hunt hypothesis drafting
• Conduct security testing of internal web apps and APIs and translate findings into detections
• Support Incident Response with attacker tradecraft insights and develop detections from investigations
• Document and hand off work so others can operate tooling and environments independently

Skills

Detection engineering

SIEM

EDR

KQL

Sigma

YARA-L

Python

Go

PowerShell

Threat hunting

Technical writing

Cloud platforms

Education

Bachelor’s degree or equivalent practical experience

Tools

Splunk

Elastic SIEM

AWS CloudWatch

Azure Monitor

Job description

Cboe Global Markets, Inc. is seeking a Senior Detection Engineer to design and validate production detections across SIEM, EDR, cloud, and identity systems.

You will develop tooling for adversary simulations and repeatable validation, while advancing automation and AI-assisted workflows to shorten detection cycles. The role requires strong scripting skills, deep telemetry knowledge, and experience with Windows/AD, cloud platforms, and security testing.