Sr Engineer, Cybersecurity – SOC Process and AI Enablement

At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!

This role drives efficiency and faster response for the Security Operations Center (SOC) and incident response teams by designing smarter processes and the analytics that guide them. It leads projects and new initiatives that advance the Threat Response Organization and governs how automation and AI are adopted across it, including use case review, de-duplication, and strategic alignment. The role is distinguished by pairing hands-on process, automation, and AI work with the judgment to scale it responsibly.

Success is measured by gains in response speed and operational efficiency, the quality of data-driven decisions, and delivery in close partnership with teams across cybersecurity and the broader business. The work strengthens the organization’s resilience to cyber incidents and elevates how every response team detects and responds.

• Designs, improves, and documents threat response processes, and trains and upskills the team on new processes, automation, and AI to increase efficiency and speed for the SOC and incident response teams
• Governs automation and AI adoption across threat response, including use case review, de-duplication, and strategic alignment
• Partners with teams across cybersecurity and other areas of the business to deliver these solutions and align them with organizational goals and priorities
• Leads projects and new initiatives that advance the capabilities of the Threat Response Organization
• Builds and integrates automation and AI, including SOAR and modern AI tooling, into response workflows to reduce manual effort
• Develops data, reporting, and visibility that drive decision making and surface opportunities for new initiatives
• Participates in other duties or projects as assigned by business management as needed

• Bachelor's Degree plus 5 years of related work experience OR Advanced degree with 3 years of related experience (required)
• Acceptable areas of study include Computer Science or Information Technology. (required)
• 4-7 years experience with security related software and/or business process design (preferred)
• 4-7 years experience in technical project management and leading cross-functional solution design teams (preferred)
• 3-5 years hands-on experience automating security and operational workflows with SOAR/automation platforms and scripting (for example, Python and APIs) (preferred)
• 2-4 years experience working with SIEM and detection tooling (for example, Splunk or Microsoft Sentinel) and translating findings into process and reporting improvements (preferred)
• 1-3 years hands-on experience applying modern AI tools (for example, Claude and other large language models) to security or operational workflows (preferred)

• Artificial Intelligence (AI)
• Cybersecurity
• Security Automation
• Security Engineering and Testing
• Security Incident and Escalation Management
• Security Technologies
• Stakeholder Management
• Threat Modeling
• Process Design & Improvement
• Data Analytics & Reporting

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk & Informaitonal Systems Control (CRISC)

• At least 18 years of age
• Legally authorized to work in the United States

Travel Required…