Senior Detection Engineer: Threat Analytics & Automation

CBIZ; Independence (AL); Hybrid; USD 110,000 - 160,000; Full time

Job summary

CBIZ, Inc. seeks a Security Detection Engineer to design and operate detections across SIEM, XDR, NDR, and cloud platforms.

This senior, hands-on role translates threat intel into actionable analytics and owns the detection lifecycle from use-case design to deployment and continual improvement. You will collaborate with cross-functional teams, test detections, reduce false positives, and mature security analytics with automation and runbooks.

Qualifications

• College degree or equivalent required.
• 1 year related security experience.
• Ability to follow technical instructions and guidelines.
• Ability to document daily activities and system functions.
• Travel as required and on-call availability.

Responsibilities

• Design, test, deploy, document, and maintain detection content across SIEM, XDR, NDR, identity, email, endpoint, network, cloud, and application security platforms.
• Turn threat intelligence, adversary tactics and techniques, incident findings, and business risk into prioritized detection use cases.
• Own the detection lifecycle, including intake, prioritization, peer review, testing, release, version control, and retirement.
• Monitor detection health, data freshness, rule execution, alert quality, and coverage gaps; drive corrective action when telemetry degrades.
• Investigate and respond to alerts and incidents across multiple security platforms; lead containment and remediation.

Skills

Detection engineering

Threat analytics

SIEM/XDR

Incident response

Automation scripting

Education

College degree or equivalent

Tools

PowerShell

Python

Bash

APIs

SOAR

Job description

CBIZ, Inc. seeks a Security Detection Engineer to design and operate detections across SIEM, XDR, NDR, and cloud platforms.

This senior, hands-on role translates threat intel into actionable analytics and owns the detection lifecycle from use-case design to deployment and continual improvement. You will collaborate with cross-functional teams, test detections, reduce false positives, and mature security analytics with automation and runbooks.