Senior Threat Engineer: AI-Powered Detection & Red Teaming

CDW LLC.; United States; Remote; USD 137,000 - 191,000; Full time

Job summary

CDW is seeking a highly experienced Threat Detection Engineer to design and operate advanced, AI-powered security detections and autonomous response workflows across identity, endpoints, and cloud environments in the United States.

You will lead continuous AI red teaming, emulation of attacker behavior, and threat hunting efforts, translating findings into automated detections and hardened platform controls. Strong Python, MITRE ATT&CK, and SIEM experience are required.

Qualifications

• Bachelor’s degree and 7+ years in threat detection, threat hunting, incident response, or 11+ years equivalent experience.
• Hands-on experience building detections in SIEM platforms and cloud security tooling.
• Practical knowledge of MITRE ATT&CK mapping of detections and automated responses.
• Experience with adversary emulation, purple teaming, breach and attack simulation, or penetration testing against production controls.
• Proficiency in Python for production‑grade automation and tooling.
• Experience applying AI/ML or LLM capabilities to security problems and secure AI solutions.
• Experience with security automation, orchestration, or SOAR platforms.
• Familiarity with Defender, Sentinel, CrowdStrike, Tines, Entra ID, and Splunk; familiarity with offensive tooling like Atomic Red Team, Caldera, Cobalt Strike, etc.

Responsibilities

• Engineer high-fidelity detections across identity, endpoint, network, cloud, and SaaS with automated response to ensure containment.
• Apply AI/ML to triage and enrich alerts, cluster signals into incidents, and narrate attacker story.
• Build autonomous response playbooks for rapid containment and credential/token management.
• Implement guardrails: confidence thresholds, blast-radius controls, human-in-the-loop escalation, and rollback tests.
• Instrument metrics: MTTD, MTTC, false positives, and ATT&CK coverage; improve over releases.
• Use LLMs and agentic tooling to summarize investigations, draft containment recommendations, and extract indicators.

Skills

Python programming

Threat detection engineering

Threat hunting

Incident response

AI/ML or LLM capabilities

Security automation/SOAR

MITRE ATT&CK mapping

Adversary emulation/Purple teaming

Education

Bachelor’s degree in relevant field

11+ years equivalent experience

Tools

Microsoft Defender

Microsoft Sentinel

CrowdStrike

Tines

Entra ID

Splunk

Atomic Red Team

Caldera

Cobalt Strike

Job description

CDW is seeking a highly experienced Threat Detection Engineer to design and operate advanced, AI-powered security detections and autonomous response workflows across identity, endpoints, and cloud environments in the United States.

You will lead continuous AI red teaming, emulation of attacker behavior, and threat hunting efforts, translating findings into automated detections and hardened platform controls. Strong Python, MITRE ATT&CK, and SIEM experience are required.