This role pays less than
96%
of similar roles. Most pay
$177,800–$254,750
— the shaded band above.
At the midpoint, this role pays about
$138k
versus about
$216k
for comparable roles.
Based on 240 similar postings.
Employer
About P&G
Procter & Gamble (P&G) is one of the world''s largest consumer goods companies, marketing a broad portfolio of household and personal care brands including Tide, Pampers, Gillette, and Crest. Industry: Consumer Goods
P&G currently has
5 open roles
on FindRole.
Listed pay typically runs
$85,000–$122,200
across 5 roles with salary data.
The Senior Detection Engineer (AI-ML Focus) joins the Cyber Defense Technology team to build, tune, and scale detection capabilities across enterprise SIEM platforms. Working at the intersection of detection engineering and AI, the role involves developing a threat-informed pipeline where LLM-assisted workflows and agentic AI tools accelerate rule creation, validation, and coverage analysis. Day-to-day responsibilities include writing detection logic, managing detection-as-code via Git-based workflows and CI/CD pipelines, and collaborating with Threat Intelligence and Hunting teams to improve alert fidelity. The role requires proficiency in Python, experience with the MITRE ATT&CK framework, and familiarity with security log sources like EDR and cloud networks. Candidates will utilize Model Context Protocol tooling and AI/ML techniques for anomaly detection while addressing complex problems such as identifying agentic attacks and managing large-scale rule libraries against live telemetry.
Design, build, and tune detection rules mapped to the MITRE ATT&CK framework across SIEM and data lake platforms.
Manage detection content using Git-based workflows including branching, pull requests, and CI/CD deployment pipelines.
Utilize agentic AI tools and LLM-assisted workflows to accelerate detection rule development and coverage analysis.
Investigate and suppress false positives systematically using lookup-based architectures to improve alert fidelity.
Develop detections for emerging threats, new TTPs, CVEs, and active campaigns based on threat intelligence.
Collaborate with data engineers to ensure telemetry availability and high-quality log source onboarding.
Document detection logic, tuning rationale, and suppression decisions for internal security teams.
What we're looking for
Bachelor’s degree in Information Systems, IT, Computer Science, Engineering, or another technical field and/or at least 5 years of experience in detection engineering, security operations, or threat detection.
Proven experience writing and tuning SIEM detection rules, including correlation rules, scheduled queries, and real-time alerts.
Strong understanding of the MITRE ATT&CK framework and its application to detection coverage.
Proficiency in Python for automation, scripting, and tooling.
Experience with git-based workflows, including branching, PRs, and CI/CD pipelines for managing security content.
Familiarity with security log sources such as EDR, identity, cloud, network, and proxy.
Certifications such as CISSP, CCSP, OSCP, GCDA, GCIA, or relevant certifications in cloud and ML/AI (preferred).