Senior Threat Detection & Automation Engineer

Northwestern Mutual; Milwaukee (WI); Presencial; USD 108.000 - 162.000; Jornada completa

Descripción de la vacante

Northwestern Mutual's cybersecurity team seeks a Detection & Automation Engineer III to design and maintain advanced threat detections across cloud, identity, endpoint, and databases, partnering with infrastructure, cloud, and application teams to strengthen threat detection programs.

The role emphasizes hands-on Splunk Enterprise Security, telemetry quality, and Detection-as-Code initiatives, with opportunities to mentor junior engineers and contribute to security architecture while advancing

Formación

• Bachelor's degree or equivalent professional experience in cybersecurity or IT.
• 2+ years in cybersecurity, detection engineering, or SIEM operations.
• Hands-on experience with Splunk Enterprise Security or similar SIEM.
• Knowledge of security monitoring, telemetry, and threat detection.
• Experience with cloud, identity, endpoints, apps, or databases.
• Familiarity with MITRE ATT&CK and detection strategies.
• Scripting or automation skills (Python/PowerShell).
• Experience with source control, testing, and CI/CD.

Responsabilidades

• Design, develop, test, and maintain advanced threat detections.
• Enhance coverage by closing telemetry gaps with stakeholders.
• Administer Splunk ES: data models, dashboards, and performance.
• Onboard new security data sources and validate telemetry quality.
• Develop logging standards, monitoring controls, and data quality.
• Design monitoring for databases and critical apps focusing on privileged access.
• Contribute to Detection-as-Code with version control and CI/CD.
• Mentor junior engineers and drive best practices.

Conocimientos

Threat detection engineering

Splunk ES

SIEM administration

Cloud security

Automated testing

CI/CD pipelines

Python scripting

Telemetry data

Educación

Bachelor's degree in Cybersecurity/IT/CS

Herramientas

Splunk Enterprise Security

Cribl Stream

Descripción del empleo

Northwestern Mutual's cybersecurity team seeks a Detection & Automation Engineer III to design and maintain advanced threat detections across cloud, identity, endpoint, and databases, partnering with infrastructure, cloud, and application teams to strengthen threat detection programs.

The role emphasizes hands-on Splunk Enterprise Security, telemetry quality, and Detection-as-Code initiatives, with opportunities to mentor junior engineers and contribute to security architecture while advancing