The Job

Senior Engineer, Cyber Defense Center

Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet · DevOps · Mjukvaruutveckling

Gå med för uppdateringar

I korthet

Volvo Group is seeking a Senior Security Engineer for their Cyber Defense Center in Greensboro, NC. This role involves building and managing a software-defined security operations architecture using an Everything-as-Code approach, with a focus on detection and automated response. The position requires strong engineering skills, proficiency in security query languages, and experience with CI/CD pipelines.

Ansvarsområden

  • Engineer Detection-as-Code using KQL, SPL, SQL, and Python, managed via version control and CI/CD pipelines.
  • Create new monitoring use cases based on red team exercises, CTIC reports, and threat research.
  • Automate threat response by building and integrating modular automation playbooks.
  • Optimize security controls (XDR, firewalls, cloud security, DLP) to adapt to new threats.
  • Partner with cross-functional teams to translate analytical needs into architecture and working code.
  • Establish AI & Data Foundations by integrating contextual data models, API gateways, and threat intelligence pipelines.
  • Develop detection and automation use cases across various data architectures (SIEM, data lakes, S3/Storage blobs, Federated Search).
  • Mitigate detection and response gaps through new rule creation, process improvement, and architectural designs.
  • Build and maintain CI/CD pipelines with automated validation gates for secure content deployment.

Krav

  • Proficiency in Python or PowerShell.
  • Understanding of software engineering best practices, APIs, and data structures (JSON/YAML).
  • Deep proficiency in security query languages (Splunk SPL, KQL, SQL) and Python/TypeScript.
  • Hands-on experience with Git and CI/CD platforms for managing infrastructure and logic as code.
  • Technical experience configuring and administering enterprise security controls (XDR/EDR/NDR, Firewalls, Cloud Security, DLP, Identity).
  • Strong background in SOC and/or SecOps engineering.
  • Problem-solving mindset with the ability to bridge engineering and SOC operations.
  • Ability to convey targeted messages to different audiences.

Önskade kvalifikationer

  • Familiarity with Graph Databases (Neo4j, Cosmos DB Gremlin) and entity relationship modeling.
  • Experience integrating LLMs or building RAG pipelines for enterprise use cases.
  • Experience with Docker, API Gateways, and Infrastructure-as-Code (Terraform/Bicep).
  • Experience working with compiled languages (C# / .NET).
  • Exposure to Operational Technology (OT) and manufacturing environments.

Förmåner

  • Competitive base pay of $111,100.00 - $137,200.00 annually.
  • Bonus eligibility.
  • Competitive medical, dental and vision insurance.
  • Generous paid time off.
  • Competitive matching retirement savings plans.
  • Working environment where safety, health and wellbeing come first.
  • Focus on professional and personal development through Volvo Group University.
  • Programs to ease combining work and personal life.
#Cyber Defense#Security Operations#Everything-as-Code#Detection-as-Code#Threat Research#Automation#Incident Response#Security Controls#AI#ML#Data Lakes#SIEM#CI/CD Pipelines#Breach Attack Simulation#Threat Intelligence#Graph Databases#LLMs#RAG#Containerization#IaC#OT Security
Volvo Group Logo

Företag

Volvo Group

Publicerade jobb

för 3 veckor sedan

Anställningstyp

Heltid

Arbetsform

På plats

Erfarenhetsnivå

Senior

Platser

Greensboro, United States

Sökande

Ansök tidigt