Detection Automation Engineer III

JOB REQUIREMENTS: About the Job: At Northwestern Mutual, our cybersecurity team is focused on protecting our clients, advisors, and business platforms through innovative detection and automation capabilities. As a Detection & Automation Engineer III, you will play a key role in enhancing our ability to identify, investigate, and respond to cybersecurity threats across cloud, identity, endpoint, database, and application environments. This position blends DevOps, detection engineering, SIEM administration, telemetry engineering, and data integration to improve security visibility and strengthen our threat detection program. You'll work closely with cybersecurity, infrastructure, cloud, and application teams to build scalable detection capabilities, onboard critical security telemetry, and drive continuous improvements across our security operations ecosystem. What You'll Do: Design, develop, test, and maintain advanced threat detections across a variety of security platforms and data sources. Enhance detection coverage by identifying telemetry gaps and partnering with stakeholders to improve visibility across the environment. Administer and optimize Splunk Enterprise Security, including ES frameworks, data models, reporting, dashboards, and search performance. Troubleshoot and resolve security data ingestion, field extraction, parsing, normalization, and performance issues. Partner with technology teams to onboard new security data sources and validate telemetry quality. Develop and maintain security logging standards, monitoring controls, and data quality processes. Design monitoring capabilities for enterprise databases and business-critical applications, focusing on privileged access, authentication activity, anomalous behavior, and sensitive data access. Contribute to Detection-as-Code initiatives through version control, automated testing, CI/CD pipelines, and reusable detection frameworks. Track and improve key metrics including detection coverage, alert fidelity, telemetry health, and operational effectiveness. Drive continuous improvement efforts that reduce false positives, improve detection accuracy, and streamline security operations. Provide technical leadership, mentor junior engineers, and contribute to architectural and engineering best practices. What You'll Bring to the Role: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience. 2+ years of experience in cybersecurity, detection engineering, security operations, SIEM engineering, or related disciplines. Hands-on experience developing and maintaining threat detections within Splunk Enterprise Security or comparable SIEM platforms. Strong understanding of security monitoring, log management, telemetry engineering, and threat detection methodologies. Experience working with... For full info follow application link. EEO/AA Employer/Vets/Disability ***** APPLICATION INSTRUCTIONS: Apply Online: ipc.us/t/E1F86E9EDEBD43EB Qualified females, minorities, and special disabled veterans and other veterans are encouraged to apply.