Senior Threat Engineer — AI-Driven Detection & Red Teaming

CDW; United States; On-site; USD 137,000 - 191,000; Full time

Job summary

CDW is seeking a Senior Threat Engineer to design AI‑powered detection and autonomous response capabilities. You will craft detections across identity, endpoints, networks, and cloud, and run continuous adversary emulation to test defenses in production.

You will enable rapid containment, implement guardrails, and drive improvements in mean time to detect and contain while reducing false positives using MITRE ATT&CK mappings and AI tooling.

Qualifications

• Bachelor’s degree required; 7+ years in threat detection engineering, threat hunting, incident response, or related security fields.
• Hands‑on experience building and tuning detections in SIEM/cloud security tooling; familiarity with MITRE ATT&CK.
• Experience with adversary emulation, breach and attack simulation, and AI/ML applications in security.
• Proficiency in Python for automation; experience with security orchestration, automation, and response (SOAR).

Responsibilities

• Engineer high‑fidelity detections across identity, endpoint, network, cloud, and SaaS with automated response paths for containment.
• Apply AI/ML to triage, correlate, and enrich alerts; create cohesive incident narratives.
• Build autonomous and semi‑autonomous response playbooks for rapid containment and safe rollback.
• Develop guardrails: confidence thresholds, blast‑radius controls, human‑in‑the‑loop escalation, audit trails.
• Measure outcomes: mean time to detect/contain, false positives, ATT&CK coverage; drive improvement.
• Lead continuous adversary emulation across production controls; validate defense in attacker speed.

Skills

Threat detection engineering

Threat hunting

Incident response

Offensive security

Python

AI/ML

Security automation

MITRE ATT&CK

Adversary emulation

SOAR platforms

Education

Bachelor’s degree

Tools

Atomic Red Team

Caldera

Cobalt Strike

Splunk

Microsoft Defender

Microsoft Sentinel

CrowdStrike

Tines

Entra ID

Job description

CDW is seeking a Senior Threat Engineer to design AI‑powered detection and autonomous response capabilities. You will craft detections across identity, endpoints, networks, and cloud, and run continuous adversary emulation to test defenses in production.

You will enable rapid containment, implement guardrails, and drive improvements in mean time to detect and contain while reducing false positives using MITRE ATT&CK mappings and AI tooling.