> Markdown version of [/jobs/ext/2240605-security-spec-lead](https://www.wearedevelopers.com/jobs/ext/2240605-security-spec-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Spec Lead - **Company:** American Electric Power - **Location:** Austin, TX, United States - **Experience:** Expert - **Salary:** $18,720.0 - $41,600.0 - **Contract:** Permanent contract - **Skills:** Data Analysis, Cyber Security, Intrusion Detection and Prevention, Network Intrusion Detection Systems, Reverse Engineering, Security Information and Event Management, Mitre Att&ck, Malware, Cyber Threat Analysis, Information Technology, Cybercrime, Purple Team (Cyber Security) - **Published:** August 26, 2026 - **Apply:** https://dejobs.org/x/x/31E8BB59134F4CFEB3216879CDE19E11/job/ ## About the Role Licenses and Certifications: CSFA, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCIP, GCTI, GDAT, GICSP, GMON, GOSI, GREM, GRID, GSOM, GXPN, OSCP, OSEE, Treadstone Certified Threat Intelligence Analyst/Certified Threat Counterintelligence Analyst, CERT Incident Response Process Professional, CREST Certified Host Intrusion Analyst, CREST Certified Incident manager, CREST Certified malware Reverse Engineer, CREST Certified Network Intrusion Analyst, CREST Certified Threat Intelligence Manager Experience: Demonstrable experience in one or more of the following disciplines: * Detection Engineer * Incident Response Analyst * CIRC/SOC Lead * Threat Intelligence or Counterintelligence Analyst * Cyber Threat Hunt Analyst * Malware Reverse Engineer * Clearance: Current government security clearance or ability to obtain a security clearance at a minimum of the Secret level. What We're Looking For: Education requirements are listed below: * Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) or NERC CIP compliance; OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cyber Security Program; alternatively, may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment). Work Experience requirement listed below: * 7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above; OR NERC-CIP compliance in addition to any experience identified above. ## Description We are seeking a highly motivated Detection Engineer to join our Cybersecurity Intelligence and Defense team. The Detection Engineer will be responsible for designing, developing, tuning, and maintaining threat detection capabilities across enterprise environments. This role works closely with Threat Intelligence Analysts, Threat Hunters, Incident Responders, and Security Operations Center (SOC) personnel to identify emerging threats and improve the organization's ability to detect malicious activity., The ideal candidate possesses a strong understanding of adversary tactics, techniques, and procedures (TTPs), security monitoring technologies, and data analysis. This individual will play a critical role in advancing detection coverage, reducing false positives, and improving overall cyber resilience., * Design, develop, test, and deploy security detections across SIEM, EDR, NDR, cloud, and other security platforms. * Translate threat intelligence and threat hunting findings into actionable detection content. * Create and maintain detection rules, correlation searches, behavioral analytics, and alerting mechanisms. * Tune existing detections to improve fidelity and reduce alert fatigue. * Map detections to the MITRE ATT&CK framework and identify coverage gaps. * Collaborate with Threat Hunting and Incident Response teams to improve detection effectiveness. * Develop use cases and detection strategies for emerging threats and adversary behaviors. * Analyze security telemetry from endpoints, networks, cloud environments, and identity providers. * Measure and report on detection performance, effectiveness, and coverage. * Support purple team exercises, tabletop exercises, and adversary emulation activities. * Maintain documentation, detection standards, and engineering processes. * Automate detection engineering workflows where appropriate. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)