AI Detection Engineering Information Security Specialist

Work Location:
Mount Laurel, New Jersey, United States of America

Hours:
40

Pay Details:
$98,160 - $159,270 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:
Technology Solutions
Job Description:

We are seeking an experienced and technically proficient Information Security Specialist (L10) to lead CTD's AI-driven detection engineering capability. This role owns the design, implementation, and operation of machine learning-enhanced detections across SIEM/XDR ecosystems, elevating alert fidelity and analyst productivity through automation, codified pipelines, and governed model lifecycle. You will partner with CSOC, CSIRT, Threat Hunting, and platform teams to deliver enterprise-scale detections that adapt to evolving threats, while mentoring L9 engineers and shaping CTD's detection roadmap.

• Design, build, and productionize ML/AI detections (e.g., anomaly detection, behavior models, graph analytics) for Microsoft Defender (MDI/MDE/MDO), Sentinel, Splunk, and related platforms; champion model quality, drift monitoring, and explain ability.

• Establish feature pipelines and training/evaluation frameworks (offline/online) that support rapid iteration and safe rollout through CI/CD and detection-as-code workflows.

• Author and maintain reusable content libraries (rules, models, enrichers) aligned to MITRE ATT&CK and enterprise risk models; drive consistency and reusability across domains.

• Own the end-to-end lifecycle for AI-enabled use cases: problem framing, data readiness, threat modeling, model selection, validation, deployment, tuning, and retirement; maintain auditable artifacts for governance.

• Integrate detections with XSOAR playbooks, enrichment services, and case management to enable automated triage/response where risk criteria are met.

• Map AI use cases and threat models to convert high-value scenarios into AI-assisted detections; ensure MDI/XDR ↔ XSOAR synchronization and playbook readiness.

• Contribute to the detection platform vision (content libraries, testing harness, BAS integration, governance dashboards) to scale coverage and reduce time-to-detect.

• 7+ years in detection engineering, data science for security, proven delivery of production ML detections and MLOps pipelines.

• Deep expertise with SIEM/SOAR/XDR (e.g., Splunk, Sentinel, XSOAR, Microsoft Defender suite) and threat detection methodologies; hands-on with content engineering and model governance.

• Strong skills in Python (pandas, scikit-learn, PyTorch/TensorFlow), PowerShell, and SQL/KQL; experience with feature engineering, cross-validation, A/B experiments, drift detection, and explainability.

• Familiarity with MITRE ATT&CK, kill-chain and threat modeling practices; ability to translate TTPs into signals, features, and labels.

• Demonstrated ability to work across technical and non-technical stakeholders; clear written/spoken communication; experience mentoring engineers and leading cross-functional initiatives.

• Domestic Travel - Occasional
• International Travel - Never
• Performing sedentary work - Continuous
• Performing multiple tasks - Continuous
• Operating standard office equipment - Continuous
• Responding quickly to sounds - Occasional
• Sitting - Continuous
• Standing - Occasional
• Walking - Occasional
• Moving safely in confined spaces - Occasional
• Lifting/Carrying (under 25 lbs.) - Occasional
• Lifting/Carrying (over 25 lbs.) - Never
• Squatting - Occasional
• Bending - Occasional
• Kneeling - Never
• Crawling - Never
• Climbing - Never
• Reaching overhead - Never
• Reaching forward - Occasional
• Pushing - Never
• Pulling - Never
• Twisting - Never
• Concentrating for long periods of time - Continuous
• Applying common sense to deal with problems involving standardized situations - Continuous
• Reading, writing and comprehending instructions - Continuous
• Adding, subtracting, multiplying and dividing - Continuous