Lead Cybersecurity Engineer – Hybrid

American Family Insurance

. Lead the design, development, and continuous improvement of cyber defense capabilities across threat detection, threat hunting, incident response, and adversary simulation .

Posted 11/11/2026full-timeUnited StatesSenior💰 $113,000 - $194,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber defense capabilities, including threat detection, incident response, and automation using tools like Cortex XSOAR. Proficient in building and managing security data pipelines and leveraging advanced analytics for security operations.

Highest-signal resume keywords

Cortex XSOAR AutomationSecurity Data Pipeline ManagementPython ProgrammingThreat HuntingDetection Engineering

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber SecurityIncident ResponseForensics AnalysisPenetration TestingEthical HackingSecurity AnalyticsThreat IntelligenceSQL/KQLREST APIsAI-Driven Security

Soft Skills

Customer-Driven SolutionsTechnical LeadershipMentorship

Tools & Technologies

Cortex XSOARMicrosoft SentinelSplunkDatadogSIEMEDR

Industry Keywords

MITRE ATT&CKAdversary EmulationThreat-Informed DefenseSecurity AutomationCloud Security

Tech Stack

Tools & technologies

CloudCyber SecurityPythonSplunkSQL

About the role

Key responsibilities & impact

Lead the design, development, and continuous improvement of cyber defense capabilities across threat detection, threat hunting, incident response, and adversary simulation
Design, build, and maintain scalable security data pipelines ingesting, normalizing, enriching, and analyzing SIEM, EDR, cloud, identity, and threat intelligence data
Develop and optimize security analytics, detections, correlation rules, and threat-hunting methodologies
Design, implement, and maintain Cortex XSOAR and other SOAR automation and orchestration capabilities
Build automated investigation, enrichment, response, containment, and remediation workflows
Integrate security technologies through APIs, workflow automation, and data engineering practices
Build and maintain reusable automation frameworks, scripts, and services using Python, REST APIs, SQL/KQL, and modern development techniques
Conduct proactive threat hunting, adversary emulation, and validation exercises
Collaborate with engineering, cloud, infrastructure, identity, and security teams
Leverage AI-driven security capabilities and advanced analytics
Evaluate, implement, and optimize Datadog, Microsoft Sentinel, Splunk, and related security monitoring platforms
Provide technical leadership and mentorship for detection engineering, security automation, and threat response initiatives
Report to the Senior Manager Cybersecurity - Cyber Threat Defense

Requirements

What you’ll need

Demonstrated experience providing customer-driven solutions, support, or service
Solid knowledge and understanding of software engineering architectures, system/software designs, and system deployments
Working knowledge of Cyber Security, Cyber Engineering, Computer Science, Software Engineering, and Electrical/Computer Engineering
Extensive knowledge and understanding of security technologies and application development methodologies
Demonstrated experience performing cyber threat analysis, incident response, forensics analysis, penetration testing, and ethical hacking
Extensive knowledge and understanding of directory services and identity stores
Experience building and managing security data pipelines across SIEM, EDR, cloud, identity, and threat intelligence platforms
Hands-on experience with Cortex XSOAR or other SOAR platforms, including playbook and workflow automation
Proficiency in Python, SQL/KQL, REST APIs, and security tool integrations
Experience with Microsoft Sentinel, Splunk, Datadog, or similar security analytics platforms
Strong background in detection engineering, threat hunting, and security analytics
Experience automating security operations
Knowledge of MITRE ATT&CK, adversary emulation, and threat-informed defense practices
Experience leveraging AI-driven capabilities in security workflows
Proven ability to deliver scalable, repeatable security capabilities
Experience leading technical initiatives and mentoring cybersecurity engineers
Sponsorship is not eligible/available for this role
Offer contingent on applicable background checks
Offer contingent on signing a non-disclosure agreement
Up to 10% travel
Minimum 10 office days per month in Boston, MA or Madison, WI

Benefits

Comp & perks

Relocation support for eligible candidates
Comprehensive medical, dental, vision and wellbeing benefits
Competitive 401(k) contribution
Pension plan
Annual incentive
9 paid holidays
Paid time off program (23 days accrued annually for full-time employees)
Student loan repayment program
Paid-family leave
New Employee Orientation and in-person relationship-building experience