Senior Threat Detection & Automation Lead (Hands-on)

Cummins Inc.; Troy (MI); On-site; USD 150,000 - 190,000; Full time

Job summary

Cummins Inc. is seeking a Cybersecurity Threat Detection & Automation Manager to lead a team responsible for designing, developing, automating, tuning, and continuously improving advanced threat detection and response capabilities across enterprise, cloud, identity, endpoint, email, network, SaaS, and manufacturing/OT environments.

This hands-on player/coach leadership role will involve mentoring a team of detection engineering and automation professionals while remaining deeply involved in

Qualifications

• Master’s degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related discipline.
• 10+ years of cybersecurity experience in SOC and in creating SEIM correlations/detections and automating incident information enrichment tasks.
• Experience building mature detection lifecycle practices, including intake, prioritization, testing, tuning, monitoring, regression checks, peer review, and controlled releases.
• Experience building SOAR playbooks and automation workflows for phishing, malware, suspicious sign-ins, account compromise, endpoint containment, cloud alerts, privileged access activity, and threat intelligence enrichment.

Responsibilities

• Lead the design, development, and continuous improvement of SIEM and SOAR-driven detection and response workflows.
• Build and optimize SIEM content, including correlation rules, notable events, dashboards, risk-based alerts, data models, investigation views, and alert enrichment.
• Develop and mature SOAR playbooks that automate enrichment, triage, evidence collection, case creation, containment recommendations, response actions, and analyst decision support.
• Identify repetitive, high-volume, or high-value SOC activities that can be safely and effectively automated.
• Define automation standards covering human-in-the-loop approvals, reversible actions, audit trails, exception handling, failure modes, escalation criteria, and rollback considerations.
• Partner with SOC and Incident Response teams to ensure automation improves investigation speed, consistency, quality, and response outcomes without creating unnecessary operational risk.

Skills

Threat detection engineering

Automation

Incident response

Leadership

Education

Master’s degree in Cybersecurity/Info Security/CS/Engineering

Tools

SIEM

SOAR

EDR

Threat intelligence

MITRE ATT&CK

Job description

Cummins Inc. is seeking a Cybersecurity Threat Detection & Automation Manager to lead a team responsible for designing, developing, automating, tuning, and continuously improving advanced threat detection and response capabilities across enterprise, cloud, identity, endpoint, email, network, SaaS, and manufacturing/OT environments.

This hands-on player/coach leadership role will involve mentoring a team of detection engineering and automation professionals while remaining deeply involved in