Threat Detection & Response Engineer

Old National Bank; Highland (IN); On-site; USD 78,000 - 153,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401K

Continuing Education

Employee Assistance Program

Impact Network Groups

Job summary

Old National Bank is seeking a Cybersecurity Detection and Response Engineer to enhance security monitoring and response platforms, with a focus on Microsoft Sentinel and Defender XDR. You will build detections, support investigations, automate workflows, and improve operational efficiency across the SOC.

The role requires 4+ years in cybersecurity, strong KQL skills, and experience with scripting (PowerShell, Python) and APIs.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
• Minimum 4 years of cybersecurity experience, including security monitoring, incident response, or detection engineering.
• Experience administering Microsoft Sentinel and Microsoft Defender XDR technologies.
• Strong KQL skills and experience developing detection logic, dashboards, or hunting queries.
• Experience with scripting or automation such as PowerShell, Python, APIs, Logic Apps, or similar tools.

Responsibilities

• Develop and maintain detection use cases based on threat intelligence, emerging attack techniques, and MITRE ATT&CK.
• Design and maintain Sentinel playbooks, Logic Apps, APIs, and automation workflows.
• Automate repetitive SOC processes to improve response speed, consistency, and analyst efficiency.
• Support incident response through data analysis, evidence collection, and investigative support.
• Continuously improve monitoring, response, automation, and operational processes.

Skills

KQL

Automation scripting

Incident response

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Microsoft Sentinel

Microsoft Defender XDR

Logic Apps

PowerShell

Python

APIs

Job description

Old National Bank is seeking a Cybersecurity Detection and Response Engineer to enhance security monitoring and response platforms, with a focus on Microsoft Sentinel and Defender XDR. You will build detections, support investigations, automate workflows, and improve operational efficiency across the SOC.

The role requires 4+ years in cybersecurity, strong KQL skills, and experience with scripting (PowerShell, Python) and APIs.