Senior Threat Engineer – AI-Powered Detection, Response & Continuous AI Red Teaming

🕒 Setembro 8

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $137.000 - $190.600 / ano

⏰ Tempo Integral

🟠 Sênior

🤖 Engenheiro de IA

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 9%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

CDW

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 1984

💼 Consultoria

🏥 Saúde

📚 Educação

💰 Post-IPO Equity em 2015-07

Consulting • Healthcare • Education

A CDW é uma provedora líder de soluções tecnológicas, oferecendo uma gama abrangente de produtos e serviços para atender às necessidades dos setores empresarial, governamental, de saúde e educação. Eles são especializados em fornecer serviços de infraestrutura de TI, serviços gerenciados e soluções de segurança. A CDW faz parcerias com as principais marcas de tecnologia para entregar soluções personalizadas que aumentam a produtividade e o desempenho dos negócios em vários setores. Com um forte foco em transformação digital, segurança e soluções em nuvem, a CDW apoia as empresas na navegação pelas complexidades dos ambientes de TI modernos. Sua expertise abrange vários domínios, incluindo espaços de trabalho digitais, cibersegurança e soluções empresariais, fazendo da CDW um parceiro chave na condução de avanços tecnológicos.

Descrição

• Engineer high-fidelity detections across identity, endpoint, network, cloud, and SaaS, pairing each with automated response paths • Apply AI and machine learning to triage, correlate, and enrich alerts into incident narratives • Build autonomous and semi-autonomous playbooks to isolate hosts, revoke sessions and tokens, disable credentials, block infrastructure, and quarantine content • Implement confidence thresholds, blast-radius controls, human-in-the-loop escalation, and tested rollback paths • Measure mean time to detect, mean time to contain, false-positive rate, and MITRE ATT&CK coverage • Use LLMs and agentic tooling for investigation summaries, containment recommendations, indicator extraction, and human-reviewed detection logic generation • Operate continuous automated adversary emulation against production controls • Generate and mutate attack behavior across ATT&CK techniques using AI • Convert emulation misses into detection backlog items and noisy hits into tuning tasks, then automatically re-test fixes • Red team AI systems for evasion, prompt injection, data poisoning, and unsafe autonomous action • Operate safe production emulation with scoped targets, rate limits, abort criteria, deconfliction, and audit trails • Report living coverage metrics and prioritize the detection roadmap • Track adversary tradecraft and translate intelligence into emulation plans, detections, and response actions • Run hypothesis-driven hunts across SIEM, XDR, identity, and cloud telemetry • Lead technical deep dives on incidents and emulation findings • Develop Python integrations and tooling against platform APIs and event-driven architectures • Build self-healing detection and response capabilities that identify and correct telemetry gaps, sensor degradation, and control drift • Partner with Threat Response, Cyber Defense Engineering, security platform owners, and business unit owners • Contribute to backlogs and design reviews, mentor engineers and analysts, and document detection and automation decisions

🎯 Requisitos

• Bachelor’s degree and 7+ years of experience in threat detection engineering, threat hunting, incident response, or offensive security, or 11+ years of equivalent experience • Hands-on experience building and tuning detections in SIEM platforms and cloud-scale security tooling • Practical working knowledge of the MITRE ATT&CK framework • Experience with adversary emulation, purple teaming, breach and attack simulation, or penetration testing against production controls • Proficiency in Python for production-grade automation and tooling • Experience applying AI/ML or LLM-based capabilities to security problems • Experience designing secure, observable, and maintainable AI-enabled solutions • Working experience with security automation, orchestration, or SOAR platforms • Experience building detection and response capability for large, diverse enterprise environments is a plus • Familiarity with Microsoft Defender, Microsoft Sentinel, CrowdStrike, Tines, Entra ID, and Splunk is a plus • Familiarity with Atomic Red Team, Caldera, Cobalt Strike, or commercial breach and attack simulation platforms is a plus • Detection-as-code practice, including CI/CD pipelines, infrastructure-as-code, policy-as-code, and automated testing, is a plus • Experience securing or red teaming AI systems, including prompt injection, model evasion, and agent safety testing, is a plus • Relevant certifications such as GCIH, GCFA, GCTI, GPEN, OSCP, Azure Security, or cloud and automation certifications are a plus

🏖️ Benefícios

• Annual bonus target 10% subject to terms and conditions of plan • Benefits provided; details available at https://cdw.benefit-info.com/ • AI-fluent, curiosity-driven learning and experimentation culture • Equitable, transparent, and respectful hiring process • Support for professional growth and contributions in a collaborative environment