Senior Engineer, Cyber Defense Center
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · DevOps · Software Engineering
In short
Volvo Group is seeking a Senior Security Engineer for their Cyber Defense Center in Greensboro, NC. This role involves building and managing a software-defined security operations architecture using an Everything-as-Code approach, with a focus on detection and automated response. The position requires strong engineering skills, proficiency in security query languages, and experience with CI/CD pipelines.
Responsibilities
- Engineer Detection-as-Code using KQL, SPL, SQL, and Python, managed via version control and CI/CD pipelines.
- Create new monitoring use cases based on red team exercises, CTIC reports, and threat research.
- Automate threat response by building and integrating modular automation playbooks.
- Optimize security controls (XDR, firewalls, cloud security, DLP) to adapt to new threats.
- Partner with cross-functional teams to translate analytical needs into architecture and working code.
- Establish AI & Data Foundations by integrating contextual data models, API gateways, and threat intelligence pipelines.
- Develop detection and automation use cases across various data architectures (SIEM, data lakes, S3/Storage blobs, Federated Search).
- Mitigate detection and response gaps through new rule creation, process improvement, and architectural designs.
- Build and maintain CI/CD pipelines with automated validation gates for secure content deployment.
Requirements
- Proficiency in Python or PowerShell.
- Understanding of software engineering best practices, APIs, and data structures (JSON/YAML).
- Deep proficiency in security query languages (Splunk SPL, KQL, SQL) and Python/TypeScript.
- Hands-on experience with Git and CI/CD platforms for managing infrastructure and logic as code.
- Technical experience configuring and administering enterprise security controls (XDR/EDR/NDR, Firewalls, Cloud Security, DLP, Identity).
- Strong background in SOC and/or SecOps engineering.
- Problem-solving mindset with the ability to bridge engineering and SOC operations.
- Ability to convey targeted messages to different audiences.
Desired Qualifications
- Familiarity with Graph Databases (Neo4j, Cosmos DB Gremlin) and entity relationship modeling.
- Experience integrating LLMs or building RAG pipelines for enterprise use cases.
- Experience with Docker, API Gateways, and Infrastructure-as-Code (Terraform/Bicep).
- Experience working with compiled languages (C# / .NET).
- Exposure to Operational Technology (OT) and manufacturing environments.
Benefits
- Competitive base pay of $111,100.00 - $137,200.00 annually.
- Bonus eligibility.
- Competitive medical, dental and vision insurance.
- Generous paid time off.
- Competitive matching retirement savings plans.
- Working environment where safety, health and wellbeing come first.
- Focus on professional and personal development through Volvo Group University.
- Programs to ease combining work and personal life.
#Cyber Defense#Security Operations#Everything-as-Code#Detection-as-Code#Threat Research#Automation#Incident Response#Security Controls#AI#ML#Data Lakes#SIEM#CI/CD Pipelines#Breach Attack Simulation#Threat Intelligence#Graph Databases#LLMs#RAG#Containerization#IaC#OT Security
Company
Volvo Group
Job Posted
3 weeks ago
Employment Type
Full Time
WorkMode
On Site
Experience Level
Senior
Locations
Greensboro, United States
Applicants
Be an early applicant