Principal Security Specialist

American Electric Power

. Design, develop, test, validate, and deploy high-fidelity security detections across SIEM, EDR, NDR, cloud, identity, and other security monitoring platforms .

Posted 10/16/2026full-timeUnited StatesLead💰 $98,993 - $128,688 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and deploying high-fidelity security detections across various platforms, including SIEM and EDR. Proficient in translating threat intelligence into actionable detection content and improving detection engineering processes through automation and collaboration.

Highest-signal resume keywords

Detection EngineeringThreat Intelligence AnalysisIncident ResponseSecurity Monitoring PlatformsAutomation of Detection Workflows

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Detection Rules DevelopmentBehavioral AnalyticsAnomaly DetectionTelemetry AnalysisMITRE ATT&CK MappingCorrelation SearchesAutomated Alerting MechanismsDeception TechnologiesData-Driven MeasurementPurple Team Exercises

Soft Skills

CollaborationAnalytical ThinkingProblem Solving

Tools & Technologies

SIEMEDRNDRCloud Security PlatformsIdentity Providers

Certifications & Qualifications

CSFAGCCCGCDAGCEDGCFAGCFEGCIAGCIHOSCPCREST Certified Incident Manager

Industry Keywords

CybersecurityThreat HuntingIncident ResponseSecurity OperationsAdversary Emulation

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Design, develop, test, validate, and deploy high-fidelity security detections across SIEM, EDR, NDR, cloud, identity, and other security monitoring platforms
Improve the detection engineering program through telemetry enrichment, detection validation, purple team exercises, and data-driven measurement
Translate threat intelligence, threat hunting findings, incident response lessons learned, and emerging adversary tradecraft into detection content and monitoring strategies
Develop and maintain detection rules, correlation searches, behavioral analytics, anomaly detections, and automated alerting mechanisms
Tune detections to improve fidelity, reduce false positives and alert fatigue, and increase analyst efficiency
Map detections to MITRE ATT&CK and assess detection coverage across the attack lifecycle
Collaborate with Threat Hunting, Incident Response, Security Operations, and Intelligence teams
Research and operationalize detection use cases for emerging threats and novel attack techniques
Analyze security telemetry from endpoints, networks, cloud environments, identity providers, applications, and other enterprise data sources
Measure and report detection performance, effectiveness, and coverage
Support purple team exercises, tabletop exercises, and adversary emulation activities
Maintain detection engineering standards, documentation, use case libraries, and engineering processes
Automate detection engineering workflows, content deployment, testing, validation, and quality assurance
Identify telemetry gaps and partner with technology owners to onboard, normalize, enrich, and operationalize new data sources
Design, deploy, and maintain deception technologies including decoys, honeypots, and deceptive credentials
Analyze deception events and attacker interactions to identify adversary behaviors and improve detection and response capabilities

Requirements

What you’ll need

Bachelor's degree or associate degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical) OR graduation from an approved Cybersecurity Program OR non-degree qualifications such as hands-on demonstrated ability in a technical interview/assessment
4 or more years of Information Technology related experience OR 2 or more years of security related experience, which may include military/government work experience
Current government security clearance or ability to obtain a security clearance at a minimum of the Secret level
Demonstrable experience in one or more of the following disciplines: Detection Engineer, Incident Response Analyst, CIRC/SOC Lead, Threat Intelligence or Counterintelligence Analyst, Cyber Threat Hunt Analyst, Malware Reverse Engineer
Nice-to-have certifications including CSFA, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCIP, GCTI, GDAT, GICSP, GMON, GOSI, GREM, GRID, GSOM, GXPN, OSCP, OSEE, Treadstone Certified Threat Intelligence Analyst/Certified Threat Counterintelligence Analyst, CERT Incident Response Process Professional, CREST Certified Host Intrusion Analyst, CREST Certified Incident Manager, CREST Certified Malware Reverse Engineer, CREST Certified Network Intrusion Analyst, CREST Certified Threat Intelligence Manager

Benefits

Comp & perks

Annual bonus
Long-term incentive
401(k) match
AEP Pension
Comprehensive benefits package designed to support and enhance the overall well-being of employees.