Senior Threat Engineer: AI-Driven Detection & Red Teaming

CDW; United States; Remote; USD 137,000 - 191,000; Full time

Job summary

CDW is seeking a Senior Threat Engineer to build AI-powered detection and autonomous response capabilities across identity, endpoint, network, and cloud. You will run automated adversary emulation against production controls and translate findings into measurable improvements in detection and containment.

You will also lead threat hunting, research, and risk reduction through detection-as-code, CI/CD, and collaboration with security teams. Strong Python, MITRE ATT&CK expertise welcomed.

Qualifications

• Bachelor’s degree and 7+ years of experience in threat detection engineering, threat hunting, incident response, or offensive security, or 11+ years of equivalent experience.
• Hands-on experience building and tuning detections in SIEM platforms and cloud-scale security tooling.
• Knowledge of MITRE ATT&CK framework and mapping detections to techniques.
• Experience with adversary emulation, purple teaming, breach and attack simulation, or penetration testing against production controls.
• Proficiency in Python for production-grade automation and tooling.
• Experience applying AI/ML or LLM-based capabilities to security problems and designing secure AI-enabled solutions.
• Working experience with security automation, orchestration, or SOAR platforms.
• Desirable: large, diverse enterprise environment detection/response capability.
• Familiarity with Defender, Sentinel, CrowdStrike, Tines, Entra ID, Splunk.
• Familiarity with emulation tools like Atomic Red Team, Caldera, Cobalt Strike, or similar.
• Detection-as-code practices: CI/CD, IaC, policy-as-code, automated testing.
• Experience securing or red teaming AI systems (prompt injection, model evasion, agent safety).
• Certifications such as GCIH, GCFA, GCTI, GPEN, OSCP, Azure Security are a plus.

Responsibilities

• Engineer high-fidelity detections across identity, endpoint, network, cloud, and SaaS with automated response paths.
• Apply AI to triage, correlate, and enrich alerts, surfacing attacker narratives rather than fragmented data.
• Build autonomous response playbooks for containment and controlled actions.
• Run continuous automated adversary emulation against production controls and iterate on detections from emulation results.
• Track adversary tradecraft and translate findings into detections and response actions.
• Treat detection content as code: versioned, peer‑reviewed, and CI/CD promoted.
• Collaborate with Threat Response, security platform owners, and business units for clear ownership.

Skills

Threat detection engineering

Threat hunting

Incident response

Offensive security

Python

AI/ML security

Security automation

Adversary emulation

MITRE ATT&CK

Penetration testing

Cloud security tooling

CI/CD for detection

Emulation tooling

Certifications (GCIH/GCFA/GCTI/GPEN/OS

Education

Bachelor’s degree

Tools

Microsoft Defender

Microsoft Sentinel

CrowdStrike

Tines

Entra ID

Splunk

Atomic Red Team

Caldera

Cobalt Strike

CI/CD tooling

Job description

CDW is seeking a Senior Threat Engineer to build AI-powered detection and autonomous response capabilities across identity, endpoint, network, and cloud. You will run automated adversary emulation against production controls and translate findings into measurable improvements in detection and containment.

You will also lead threat hunting, research, and risk reduction through detection-as-code, CI/CD, and collaboration with security teams. Strong Python, MITRE ATT&CK expertise welcomed.