Cyber Detection & Automation Engineer

Cyber Detection & Automation Engineer We are an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people. About This TeamThe cybersecurity team enables us to conduct its global operations in a secure manner and safeguard the trusted information of its guests and users. This is accomplished by understanding business risk as manifested through cybersecurity and compliance risk, and by maintaining a high degree of employee awareness of all security and compliance topics. To further enhance our team, we are looking for a Cyber Detection & Automation Engineer. A Day In The LifeThe Cyber Detection & Automation Engineer will be responsible for designing, developing, and maintaining advanced threat detection logic and workflow automations across our security tools and platforms. You will work closely with SOC analysts, threat intelligence, and incident response commanders to ensure proactive and accurate detection of malicious activity in our environment. • Design, implement and automate high-fidelity detection rules using SIEM, EDR, and other telemetry sources (e.g. Sentinel, Defender, AWS, etc.) to improve efficiency and accuracy. • Monitor and tune alerts to reduce false positives and improve signal-to-noise ratio. • Regularly test and validate detection content to ensure its effectiveness and accuracy. • Create documentation and knowledge transfer materials for detections and engineering processes. • Perform gap analysis and continuously improve detection coverage, accuracy, and resilience. • Design and develop security automations workflows using SOAR (Security Orchestration, Automation, and Response) primarily using Microsoft Sentinel/Logic Apps. • Build and maintain custom integrations with SIEM, EDR, Threat Intel feeds, ticketing systems, and other SOC tools. • Automate repetitive SOC tasks such as alert triage, enrichment, IOC lookups, and ticket creation. • Develop dashboards or utilities to improve visibility and operational insights into SOC metrics. • Collaborate with security operations center analysts & threat intelligence to stay ahead of evolving adversary tactics (MITRE ATT&CK-based). • Create and update relevant runbooks, playbooks and other necessary documentation around detection rules and attacker TTP's. • Prepare and present detailed reports on detection/automation activities, findings, and improvements to senior management.