Senior Detection Engineer: Threat Hunting & Telemetry

AEP Service Corporation; United States; On-site; USD 99,000 - 129,000; Full time

Benefits offered by this job

Base salary

Annual bonus

Long-term incentive

401(k) match

AEP Pension

Comprehensive benefits package

Job summary

AEP is seeking a Detection Engineer to design and optimize detections across SIEM, EDR, NDR, cloud, identity, and other monitoring platforms. You will turn threat intelligence and adversary behavior into high-fidelity detection content, validating coverage and reducing false positives to strengthen the organization's cyber posture.

The role collaborates with Security Operations, Threat Hunting, Incident Response, and Intelligence teams, and involves automation, deception tech, and data‑driven

Responsibilities

• Design, develop, test, validate, and deploy high‑fidelity security detections across SIEM, EDR, NDR, cloud, identity, and other security monitoring platforms.
• Drive continuous improvement of the detection engineering program through telemetry enrichment, detection validation, purple team exercises, and data‑driven measurement of detection effectiveness and operational outcomes.
• Translate threat intelligence, threat hunting findings, incident response lessons learned, and emerging adversary tradecraft into actionable detection content and monitoring strategies.
• Develop and maintain detection rules, correlation searches, behavioral analytics, anomaly detections, and automated alerting mechanisms to identify malicious activity.
• Tune and optimize detections to improve fidelity, reduce false positives, minimize alert fatigue, and increase analyst efficiency.
• Map detections to the MITRE ATT&CK framework, assess detection coverage, and identify opportunities to improve visibility across the attack lifecycle.
• Collaborate with Threat Hunting, Incident Response, Security Operations, and Intelligence teams to validate detections and strengthen AEP's detection and response capabilities.
• Research, develop, and operationalize detection use cases for emerging threats, novel attack techniques, and evolving adversary behaviors.
• Analyze and leverage security telemetry from endpoints, networks, cloud environments, identity providers, applications, and other enterprise data sources to develop detections and improve visibility.
• Measure and report on detection performance, effectiveness, and coverage.
• Support purple team exercises, tabletop exercises, and adversary emulation activities.
• Develop, maintain, and enhance detection engineering standards, documentation, use case libraries, and engineering processes.
• Automate detection engineering workflows, content deployment, testing, validation, and quality assurance processes to improve scalability and efficiency.
• Identify security telemetry gaps and partner with technology owners to onboard, normalize, enrich, and operationalize new data sources that enhance detection capabilities.
• Design, deploy, and maintain deception technologies, including decoys, honeypots, and deceptive credentials, to detect and disrupt adversary activity across the enterprise.
• Analyze deception events and attacker interactions to identify adversary behaviors, support investigations, and improve detection and response capabilities.

Job description

AEP is seeking a Detection Engineer to design and optimize detections across SIEM, EDR, NDR, cloud, identity, and other monitoring platforms. You will turn threat intelligence and adversary behavior into high-fidelity detection content, validating coverage and reducing false positives to strengthen the organization's cyber posture.

The role collaborates with Security Operations, Threat Hunting, Incident Response, and Intelligence teams, and involves automation, deception tech, and data‑driven