AI Detection Engineering Information Security Specialist (B3617)

Design, build, and productionize ML/AI detections for platforms like Microsoft Defender (MDI/MDE/MDO), Sentinel, Splunk, and similar platforms, ensuring model quality, drift monitoring, and explainability.,Establish feature pipelines and training/evaluation frameworks to support rapid iteration and safe deployment through CI/CD and detection-as-code workflows.,Author and maintain reusable content libraries (rules, models, enrichers) aligned with MITRE ATT&CK and enterprise risk models.,Manage the full lifecycle of AI-enabled security use cases, from problem framing to deployment, tuning, and retirement, maintaining auditable artifacts.,Integrate detections with XSOAR playbooks, enrichment services, and case management for automated triage and response.,Map AI use cases and threat models to convert high-value scenarios into AI-assisted detections, ensuring synchronization and playbook readiness.,Contribute to the detection platform vision to scale coverage and reduce time-to-detect.

7+ years of experience in detection engineering, data science for security, with proven delivery of production ML detections and MLOps pipelines.,Deep expertise with SIEM/SOAR/XDR platforms (e.g., Splunk, Sentinel, XSOAR, Microsoft Defender suite) and threat detection methodologies; hands-on experience with content engineering and model governance.,Strong skills in Python (pandas, scikit-learn, PyTorch/TensorFlow), PowerShell, and SQL/KQL; experience with feature engineering, cross-validation, A/B experiments, drift detection, and explainability.,Familiarity with MITRE ATT&CK, kill-chain, and threat modeling practices; ability to translate TTPs into signals, features, and labels.,Demonstrated ability to work across technical and non-technical stakeholders; clear written/spoken communication; experience mentoring engineers and leading cross-functional initiatives.,Preferred Certifications: CISSP, GIAC (GCIA, GCIH, GCED), Azure Data/AI (DP-100, AI-102), or equivalent.

Subject to provincial regulation for employment purposes.