Security Operations

• Engineer, operate, and automate capabilities supporting the company’s Cyber Defense program
• Operate, maintain, and improve enterprise Cyber Defense platforms across endpoint, web, network, monitoring, and automation services
• Maintain next-generation SIEM integrations; onboard telemetry and resolve ingestion, parsing, or data-quality issues
• Maintain endpoint detection and response capabilities; support investigations and approved containment actions
• Manage secure web access policies, inspection controls, and approved exceptions; troubleshoot access and performance issues
• Support web application protections with network and application teams; implement rules, logging, integrations, and approved exceptions
• Perform initial triage of cybersecurity alerts and incidents; gather evidence, document findings, determine scope, and escalate as needed
• Support approved containment, remediation, and recovery actions across enterprise and cloud environments
• Develop and tune detection logic to improve signal quality and investigative value
• Build response playbooks and automate repeatable investigation and response tasks using scripting, APIs, and webhooks
• Use Infrastructure as Code, version control, testing, and change-management practices to maintain approved Cyber Defense resources
• Use AI-assisted workflows while applying access controls, testing, human oversight, and audit requirements
• Monitor platform health, maintain technical documentation, share knowledge, participate in security projects, and join the on-call rotation
• Participate in on-call rotations, including nights, weekends, and holidays
• Perform other duties as assigned

Explore Security Operations Engineer II at Credit Acceptance. Review requirements and application details.