Senior Detection Engineer, AI-ML Focus

P&G

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Cincinnati, OH
Salary
$110,000–$165,300 / yr
Employment
Full-time
Posted
65 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $216k
This role $138k
$91k $284k
below market most similar roles pay here above market

This role pays less than 96% of similar roles. Most pay $177,250–$254,750 — the blue band above. At the midpoint, this role pays about $138k versus about $216k for comparable roles.

Based on 240 similar postings.

Employer

About P&G

Procter & Gamble (P&G) is one of the world''s largest consumer goods companies, marketing a broad portfolio of household and personal care brands including Tide, Pampers, Gillette, and Crest. Industry: Consumer Goods

P&G currently has 5 open roles on FindRole.

Listed pay typically runs $92,000–$122,200 across 5 roles with salary data.

Most-posted roles

View all roles at P&G

At a glance

TL;DR · Senior Detection Engineer, AI-ML Focus

The Senior Detection Engineer joins the Cyber Defense Technology team to build, tune, and scale detection capabilities across enterprise SIEM platforms. This role operates at the intersection of detection engineering and AI, utilizing agentic AI tooling and LLM-assisted workflows to accelerate threat detection development, validation, and coverage analysis. You will write detection logic, manage detection-as-code via Git-based workflows, and collaborate with Threat Intelligence and Threat Hunting teams to improve alert fidelity. Key responsibilities include designing rules mapped to the MITRE ATT&CK framework, managing CI/CD deployment pipelines, and using MCP tooling to query telemetry. Required skills include Python, experience with security log sources like EDR and cloud, and proficiency in managing security content as code to solve complex threat detection and noise reduction problems.

What you'll do

  • Design, build, test, and tune detection rules mapped to the MITRE ATT&CK framework.
  • Write detection logic across SIEM and data lake platforms using Python and other query languages.
  • Manage detection content as code using Git-based workflows, PR reviews, and CI/CD pipelines.
  • Leverage AI agents and LLM-assisted workflows to accelerate rule development and coverage analysis.
  • Investigate and suppress false positives systematically using lookup-based architectures to improve alert fidelity.
  • Monitor emerging threats to rapidly develop detections for new TTPs, CVEs, and active campaigns.
  • Collaborate with data engineers on telemetry availability, log source onboarding, and data quality.
  • Document detection logic, tuning rationale, and suppression decisions for the security team.

What we're looking for

  • Bachelor’s degree in Information Systems, IT, Computer Science, Engineering, or a related technical field.
  • At least 5+ years of relevant experience in detection engineering, security operations, or threat detection roles.
  • Proven experience writing and tuning SIEM detection rules, correlation rules, scheduled queries, and real-time alerts.
  • Strong understanding of the MITRE ATT&CK framework and its application to detection coverage.
  • Proficiency in Python for automation, scripting, and tooling.
  • Experience with git-based workflows, including branching, PRs, and CI/CD deployment pipelines for security content.
  • Familiarity with security log sources including EDR, identity, cloud, network, and proxy.
  • Work authorization FAQ’s, please click HERE.

More like this

Similar roles

Senior Detection Engineer

DoorDash, Inc

Remote 68 days ago $159,800–$235,000
Detection Engineering Python Go SQL SPL KQL Snowflake Google SecOps Cortex MITRE ATT&CK D3FEND Detection-as-Code Threat Intelligence Risk-based Analytics Distributed Systems
7+ yrs exp Remote

Senior Security Engineer, Detection Engineering

Nvidia

Remote (CA) +2 48 days ago
Splunk Microsoft Sentinel Defender CrowdStrike Python SQL KQL SPL Git CI/CD Kubernetes Detection-as-Code SIEM Threat Hunting Incident Response Cloud Security Identity Telemetry Endpoint Data
8+ yrs exp Remote

Detection Engineer Manager

Capital One Financial

McLean, VA +3 47 days ago
EDR Python SQL SIEM CI/CD GitHub YAML Databricks Apache Spark Machine Learning MITRE ATT&CK CrowdStrike Falcon SentinelOne Microsoft Defender Windows Event Logs Sysmon Linux macOS Detection-as-Code
4+ yrs exp

Senior Manager, Cyber Defense

McDonald’s Corporation

Chicago, IL 4 days ago $167,366–$209,207
Detection Engineering SIEM Endpoint Security Detection-as-Code MITRE ATT&CK Threat Hunting Incident Response Cyber Threat Intelligence Scripting Version Control AI Adversary Emulation

Principal Threat Detection Operations Engineer

Target

Brooklyn Park, MN 40 days ago $168,000–$303,000
Python Detection-as-Code CI/CD DevSecOps APIs Kubernetes SQL NoSQL Git PowerShell Bash SIEM EDR SOAR Cloud Security REST APIs Containers Observability Threat Intelligence Security Analytics
10+ yrs exp Hybrid

Senior Manager, Security Engineering - Engineer

Uber

Seattle, WA 18 days ago
Detection Engineering SIEM EDR Kafka Flink Elastic Splunk CrowdStrike SentinelOne Wiz Okta Torq AWS GCP OCI ML LLM MITRE ATT&CK NIST CSF ISO 27001 SOC 2 Detection-as-Code
10+ yrs exp Hybrid