Sr. Threat Detection and Incident Response Engineer
- Pay
- $110,000 – $130,000 per year
- Location
- Illinois, US Offsite, More...
- Listed
- Today
Department Overview
At Motorola Solutions, our technology protects the people and communities who protect us all. The CPS Threat Management team operates at the core of our mission of "Solving for safer." We design, deploy, and continuously advance intelligent defense platforms that safeguard mission-critical systems and public safety infrastructure against emerging threats across multi-cloud and enterprise ecosystems.
About the role
We are seeking a Senior Security Threat Detection and Incident Response Engineer to advance our proactive threat management capabilities and automated response posture. In this role, you will champion the integration of intelligent workflows and AI-driven playbooks to elevate how our global security operations observe, analyze, and mitigate cyber incidents in real time.
You will work at the intersection of threat research, cloud defense engineering, and operational response, partnering closely with Architecture, Cloud Security, and SOC teams to help ensure our defenses are robust and resilient.
Whether designing autonomous remediation logic, investigating complex incidents, or running collaborative purple team simulations, your contributions will protect critical environments where reliability is essential. A Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience will set you up for success in this role.
Responsibilities
Threat Detection Engineering & Automation
- Build and maintain scalable threat management, detection, and incident response platforms across multi-cloud environments
- Design and implement automated workflows and playbooks leveraging AI-assisted actions to streamline triage and mitigation
- Observe, oversee, and analyze system telemetry to identify threat detection gaps and deploy robust, high-fidelity detection logic
Incident Response Operations & Purple Teaming
- Serve as an escalation point for high-severity security alerts and participate in an on-call rotation to investigate and remediate active security incidents
- Partner with SOC and Incident Response peers to conduct structured purple team exercises that validate detection efficacy and incident readiness
- Drive post-incident reviews and root-cause analyses to feed actionable improvements directly back into detection pipelines
Architecture Alignment & Governance
- Partner with Architecture and Security Engineering teams to help ensure secure implementation of enterprise platforms and detection tools
- Support technical adherence to relevant security control baselines, compliance standards, and NIST 800 53 governance frameworks
- Collaborate cross-functionally across engineering and technical operations to help deliver measurable security resilience across our technology stack
Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, or Information Technology - preferred
- 5+ years of experience in information security, threat detection, or incident response
- Must be a U.S. citizen with the ability to obtain necessary security clearance as required by government contract
Technical Expertise
- Cloud Security: Experience securing and monitoring multi-cloud infrastructure (AWS, Azure, or GCP)
- Scripting & Automation: Proficient in Python or another modern programming language to build integrations and automated workflows
- SOAR & API Integration: Direct experience leveraging REST APIs, webhooks, and orchestration tools to automate response playbooks
- Linux/UNIX Systems: Strong operational proficiency with Linux/UNIX environments, CLI tooling, and system-level logging
- Cloud Detection Technologies: Experience working with Cloud-Native Application Protection Platforms (CNAPP) or Cloud Detection and Response (CDR) solutions
- Telemetry & Log Architecture: In-depth familiarity with endpoint (EDR/XDR telemetry like Sysmon, CrowdStrike, SentinelOne), network flow, identity/IAM logs (Okta, Azure AD/Entra ID, AWS CloudTrail), and centralized SIEM/data-lake querying (e.g., Snowflake, Splunk, Microsoft Sentinel, Datadog).
Professional Experience
- Collaborative Communication: Demonstrated ability to communicate technical security risks and findings to diverse stakeholders including developers, product management, and legal partners
- Incident Escalation: Proven track record acting as an incident responder or escalation point during active operational security events
- Compliance Mindset: Background supporting security compliance reviews and aligning threat management practices with regulatory standards
Preferred Qualifications
- Experience utilizing agentic AI agents, LLMs, or assisted intelligence frameworks in security operations
- Hands-on experience with purple teaming and adversarial simulation frameworks such as Caldera or Stratus Red Team
- Familiarity with digital forensics fundamentals (memory/disk triage, live response scripting, timeline creation).
- Familiarity with modern web-based application design, API security, and application security principles
- Familiarity with cloud-native containerized architectures and orchestration platforms such as Kubernetes
- Professional industry certifications such as CISSP, GCIA, GCIH, or cloud security credentials
Additional information
This position is subject to working in high security areas governed by the US Department of Justice's "Criminal Justice Information Services (CJIS) Security Policy" and therefore requires successfully passing a more stringent fingerprint background check administered by Motorola Solutions Inc. customers.
Target Base Salary Range
$110,000 - $130,000 USD
Consistent with Motorola Solutions values and applicable law, we provide the following information to promote pay transparency and equity. Pay within this range varies and depends on job-related knowledge, skills, and experience. The actual offer will be based on the individual candidate.
#LI-RS1
Basic Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or Information Technology or a related field with 5+ years of experience in information security, threat detection, or incident response (OR) 8+ years equivalent experience in lieu of a Bachelor's degree.
- 5+ years experience in Cloud Security, Scripting & Automation, SOAR & API Integration, Cloud Detection Technologies, Telemetry & Log Architecture.
- Must be a U.S. citizen.
- Must be able to obtain background clearance as required by government customer
Travel Requirements
- Under 10%
- Relocation Provided
- None
- Position Type
- Experienced
- Referral Payment Plan
- Yes
Our U.S. Benefits include
- Incentive Bonus Plans
- Medical, Dental, Vision benefits
- 401K with Company Match
- 10 Paid Holidays
- Generous Paid Time Off Packages
- Employee Stock Purchase Plan
- Paid Parental & Family Leave
- and more!
Company Overview
At Motorola Solutions, we believe that everything starts with our people. We're a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that's critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.
Equal opportunity and legal notices
Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic.
We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. If you'd like to join our team but feel that you don't quite meet all of the preferred skills, we'd still love to hear why you think you'd be a great addition to our team.
We're committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. To request an accommodation, please complete this Reasonable Accommodations Form so we can assist you.
From Motorolasolutions's careers page, first listed on Rolev.ai on November 9, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Sr. Threat Detection and Incident Response Engineer role at Motorolasolutions, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Common questions
What is the salary for the Sr. Threat Detection and Incident Response Engineer role at Motorolasolutions?
The Sr. Threat Detection and Incident Response Engineer posting at Motorolasolutions states compensation of $110,000 – $130,000 per year. Final pay may depend on location, experience, and interview evaluation on Motorolasolutions's official career site.
Where is the Sr. Threat Detection and Incident Response Engineer job at Motorolasolutions located?
This Sr. Threat Detection and Incident Response Engineer position at Motorolasolutions is located in Illinois, US Offsite, More.... Always check Motorolasolutions's application page for specific state eligibility or relocation policies.
How do I apply for the Sr. Threat Detection and Incident Response Engineer position at Motorolasolutions?
This listing links directly to Motorolasolutions's Workday application page. You can apply directly on Motorolasolutions's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Workday application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.