Senior Detection Engineer - Threat Intel & Deception

American Electric Power; Columbus (OH); On-site; USD 99,000 - 129,000; Full time

Benefits offered by this job

Base salary

Annual bonus

Long-term incentive

401(k) match

AEP Pension

Comprehensive benefits package

Job summary

American Electric Power seeks a Detection Engineer to design and optimize high-fidelity detections across endpoints, networks, cloud, and identities. You will leverage threat intelligence, threat hunting findings, and telemetry to enhance visibility and accelerate threat detection, working with SOC, Incident Response, and Intelligence teams.

The role emphasizes reducing false positives, automating detection workflows, and contributing to cyber deception initiatives.

Qualifications

• Bachelor’s degree or higher with IT/security experience or Cybersecurity program completion.
• 4+ years IT/security experience for non-degree path.
• Ability to translate threat intel into detection content.

Responsibilities

• Design, develop, test, validate, and deploy high-fidelity detections across SIEM, EDR, NDR, cloud, and identity platforms.
• Drive continuous improvement of the detection engineering program through telemetry and validation.
• Translate threat intelligence and incident lessons into actionable detection content and monitoring strategies.
• Develop and maintain detection rules, correlation searches, analytics, and automated alerts.
• Tune detections to improve fidelity and reduce false positives.
• Map detections to MITRE ATT&CK and improve visibility across attack lifecycle.
• Collaborate with Threat Hunting, Incident Response, Security Operations, and Intelligence teams.
• Research and operationalize detection use cases for emerging threats and attacker behaviors.
• Analyze telemetry from endpoints, networks, cloud, identities, and apps to improve visibility.
• Measure detection performance and coverage; support purple team and tabletop exercises.
• Develop, maintain, and improve detection engineering standards and processes.
• Automate workflows, deployment, testing, and QA for detections.
• Onboard new data sources and deception technologies to enhance detection capabilities.
• Analyze deception events to understand attacker behaviors and improve response.

Skills

Threat detection

Incident response

Threat hunting

Security operations

MITRE ATT&CK

Deception technologies

Data analytics

Education

Bachelor’s or associate degree with IT/security experience

High School Diploma with 4 years IT/security experience

Cybersecurity program graduate

Job description

American Electric Power seeks a Detection Engineer to design and optimize high-fidelity detections across endpoints, networks, cloud, and identities. You will leverage threat intelligence, threat hunting findings, and telemetry to enhance visibility and accelerate threat detection, working with SOC, Incident Response, and Intelligence teams.

The role emphasizes reducing false positives, automating detection workflows, and contributing to cyber deception initiatives.