Job description

Why Mobility Global? At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we’re creating new opportunities for our customers, our business, and our people. Join a team singularly focused on transforming the automotive industry. S&P Global Mobility is Mobility Global — the company behind CARFAX, automotiveMastermind, Market Scan, and Polk Automotive Solutions. Our strength comes from our people, and here, the progress you make helps the entire automotive ecosystem move faster and with greater confidence. -10X Virginia Business Best Places to Work -9X Washingtonian Great Places to Work -10X Washington Post Top Workplace -3X St. Louis Post-Dispatch Best Places to Work What You’ll Do Lead the ongoing maturity and optimization of the Google SecOps platform, improving detection coverage, data quality, operational effectiveness, and overall SIEM capabilities. Design, build, tune, and maintain detection rules, parsers, data pipelines, and log integrations to ensure reliable visibility across the enterprise. Develop and enhance high-confidence detection content by partnering with Threat Intelligence and Cyber Defense teams to convert emerging threats into actionable alerts. Evaluate existing Cyber Defense workflows and identify opportunities to streamline operations through AI-driven processes and automation. Design and implement AI-assisted workflows, tools, and custom agents that improve analyst efficiency, and support the evolution of AI-driven alert triage by improving the quality, consistency, and context of the data and detections that power automation. Build integrations, automations, and enrichment capabilities that reduce manual effort, accelerate investigations, and improve response times. Define and track key performance metrics, including detection effectiveness, false-positive reduction, automation adoption, and analyst productivity, to measure program success. Create and maintain clear documentation for detections, engineering solutions, workflows, and operational processes to ensure consistency and long-term maintainability. Partner closely with Security Operations, Threat Intelligence, Incident Response, and Engineering teams to continuously improve detection and response capabilities across the organization. What We’re Looking For Required Qualifications 6 years of hands-on experience engineering and optimizing enterprise SIEM platforms, with experience implementing and maturing Google SecOps or a comparable SIEM solution. Strong expertise in Google SecOps, including detection engineering, parser development, log onboarding, data normalization, and platform administration, with a proven record of improving SIEM effectiveness through expanded detection coverage, tuning, and data quality improvements. Experience applying AI and automation within security operations, including alert triage, investigations, threat hunting, case management, or other Cyber Defense workflows, and the ability to evaluate existing processes and implement solutions that reduce manual effort. Proficiency in Python or similar scripting languages to develop integrations, automations, and workflow enhancements. Strong understanding of detection engineering, attacker tactics and techniques, security telemetry, and the end-to-end security data lifecycle, with strong analytical, problem-solving, and written and verbal communication skills. This is a hybrid role with in-office expectations determined by location and subject to change based on evolving business needs. This position is open to applicants who are currently authorized to work in the United States and will not require employer sponsorship now or in the future. The anticipated annual base salary range for this position is $112,000 - $168,000. Actual compensation within this range will be determined based on a variety of factors, including geographic location, relevant experience, skills, qualifications, and internal equity considerations. Mobility Global is committed to providing competitive compensation that reflects local market conditions and individual contributions. In addition to base salary, employees may be eligible for incentive compensation, long-term incentives, and a comprehensive benefits package, where applicable. What’s In It for You Competitive compensation package, including base salary and incentive opportunities where applicable. Comprehensive health and wellness benefits for employees and eligible dependents. Retirement savings programs, including company matching contributions where available. Equal Opportunity Employer Mobility Global is proud to be an Equal Opportunity Employer. We value diverse perspectives and are committed to fostering an inclusive workplace where everyone is respected, supported, and empowered to succeed. We provide reasonable accommodations throughout the hiring process and employment for qualified individuals with disabilities. Recruitment Fraud Alert Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.

Requirements

Must-haves

Why Mobility Global?
-10X Virginia Business Best Places to Work
-9X Washingtonian Great Places to Work
-10X Washington Post Top Workplace
-3X St. Louis Post-Dispatch Best Places to Work
What You’ll Do
Lead the ongoing maturity and optimization of the Google SecOps platform, improving detection coverage, data quality, operational effectiveness, and overall SIEM capabilities.
Design, build, tune, and maintain detection rules, parsers, data pipelines, and log integrations to ensure reliable visibility across the enterprise.
Develop and enhance high-confidence detection content by partnering with Threat Intelligence and Cyber Defense teams to convert emerging threats into actionable alerts.
Evaluate existing Cyber Defense workflows and identify opportunities to streamline operations through AI-driven processes and automation.
Build integrations, automations, and enrichment capabilities that reduce manual effort, accelerate investigations, and improve response times.
Define and track key performance metrics, including detection effectiveness, false-positive reduction, automation adoption, and analyst productivity, to measure program success.
Create and maintain clear documentation for detections, engineering solutions, workflows, and operational processes to ensure consistency and long-term maintainability.
Partner closely with Security Operations, Threat Intelligence, Incident Response, and Engineering teams to continuously improve detection and response capabilities across the organization.
What We’re Looking For
6 years of hands-on experience engineering and optimizing enterprise SIEM platforms, with experience implementing and maturing Google SecOps or a comparable SIEM solution.
Proficiency in Python or similar scripting languages to develop integrations, automations, and workflow enhancements.
This is a hybrid role with in-office expectations determined by location and subject to change based on evolving business needs.
This position is open to applicants who are currently authorized to work in the United States and will not require employer sponsorship now or in the future.
What’s In It for You
Competitive compensation package, including base salary and incentive opportunities where applicable.
Comprehensive health and wellness benefits for employees and eligible dependents.
Retirement savings programs, including company matching contributions where available.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipython

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Wellness