{"id":885159,"url":"https://alion.io/job/skechers-detection-and-automation-engineer","title":"Detection and Automation Engineer","company":{"id":715105,"name":"Skechers","domain":"skechers.com","url":"https://alion.io/company/skechers-3","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":414,"ghost_share":0,"stale_share":0.957,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-28T05:59:10Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Manhattan Beach, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":125000,"max":165000,"currency":"USD","period":"year","gross":null,"usd_annual":165000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false}],"status":"closed","first_seen_at":"2026-08-20T00:00:00Z","employer_posted_date":"2026-08-20","last_verified_at":"2026-10-28T01:24:08Z","board_verified":false,"closed_at":"2026-10-28T01:24:08Z","days_open":69,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":69},"description":"ABOUT THE ROLE:Our Cybersecurity Engineers at Skechers are key members of our global cybersecurity team. This position plays a leading, hands-on role in advancing detection and response capabilities through the development and maintenance of security automation playbooks, detection content, and the tools and infrastructure that support security monitoring and response. You will implement and manage systems for log and event data processing and analysis, prioritize and develop detections based on adversary behaviors, lead purple team exercises, and build automation workflows that incorporate both established logic and emerging AI capabilities to improve analysis, context, and response. While on the front lines of our global cyber defense practice, you will act as an escalation point for incidents and alerts, while working proactively to identify and resolve cybersecurity issues. The role will involve working closely with infrastructure, application, and business teams globally to improve telemetry, validate defensive capabilities, and help facilitate secure operations.\nThis is a great opportunity for someone looking to join an agile cybersecurity team with an eye for innovation and a continuous improvement mindset. The candidate who will find the most success and fulfillment brings a genuine interest and passion for cybersecurity, a love for learning, a positive attitude, and a desire to roll up their sleeves and dive into the deep end.\nWHAT YOU'LL DO:\nSource, integrate, and leverage log and event data to create insights and develop queries, detections, and dashboards\nPrioritize, develop, test, tune, and maintain detection logic, rules, and alerts based on threat intelligence, attack techniques, and knowledge of adversary behavior\nDevelop and maintain clear documentation of detection logic, data requirements, test results, tuning decisions, alert handling, and response procedures\nImprove the quality and usability of security telemetry by evaluating source integrations, parsing, normalization, enrichment, field mappings, and logging practices to ensure the data supports effective detection and investigation.\nDrive regular threat hunting and purple team exercises and translate findings into measurable detection and response improvements\nDesign, build, and continuously improve security automation playbooks that blend deterministic actions with AI-assisted analysis and actions\nManage and maintain the security tools and supporting infrastructure used for log processing, detection engineering, orchestration, and response automation\nTriage alerts and reports received from various sources and perform incident response in real time as needed\nEvaluate, deploy, and maintain innovative security tools, technology, and systems\nCollaborate to define cybersecurity standards and develop secure procedures\nWork closely with multiple global groups and business units to provide guidance and support\nPerform regular security and vulnerability reviews and participate in periodic security and compliance audits\nStay current with the changing threat landscape, detection engineering and automation practices, AI capabilities and limitations, and defensive technologies.\nWHAT YOU'LL BRING:\nAdvanced experience with event log management, aggregation, alerting, and monitoring\nDemonstrated experience developing, tuning, testing, and documenting detection rules and alerts, with working knowledge of adversary tactics, techniques, and procedures.\nExperience with SOAR or similar automation platforms, APIs, webhooks, and scripting languages such as Python or PowerShell\nDeep understanding of security concepts relating to identity and access management, network architecture, and systems hardening in a large heterogeneous environment\nExperience working with servers and workstations running Windows, Linux, and macOS\nStrong experience with public cloud services (AWS, Azure, GCP) a plus\nExcels in developing and maintaining effective working relationships while remaining focused on the task at hand\nAbility to excel in a fast-paced and rapidly changing environment\nStrong analytical and problem-solving skills, with attention to detail and the ability to follow evidence\nStrong documentation habits with excellent written and oral communication skills\nAssumes a lead role in cybersecurity projects, incident response, and developing new concepts\nAbility to simplify and communicate complex technical data and concepts in an understandable format\nMentors junior team members and shares technical knowledge across the team\nREQUIREMENTS:\nStrong working knowledge in cybersecurity, systems, cloud, or network engineering\n5+ years of experience in a dedicated cybersecurity role, or a combination of equivalent information technology experience, training, and education\nGIAC, (ISC)2, or equivalent certifications a plus\nThe pay range for this role is $125,000-$165,000/yr USD.\nAbout Skechers\nSkechers, a global Fortune 500® company, develops and markets a diverse range of lifestyle and performance footwear, apparel, and accessories. Serving over 180 countries and territories, Skechers connects customers to products through department and specialty stores, e-commerce and digital stores, and through our more than 5,300 Skechers retail locations.\nEqual Employment Opportunity\nSkechers is committed to providing a safe, inclusive, and respectful work environment. Skechers provides equal employment opportunities for all employees and applicants for employment without regard race, color, religion, gender, gender identification and expression, national origin, marital status, age, disability, genetic information, military status, sexual orientation, or any other protected characteristic established by local, state or federal law.\n Reasonable Accommodation\nApplicants for employment who require a reasonable accommodation to apply for a job should request appropriate accommodation by emailing .\nTo perform this job successfully, an individual must be able to perform each job responsibility satisfactorily. The skills, abilities and physical demands described are representative of those duties that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities, who are otherwise qualified for the job position, to perform the essential functions.","description_format":"text","description_chars":6401,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Footwear","Apparel & Fashion Brands","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-14T03:33:14Z"},{"event":"close","at":"2026-10-28T01:24:08Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 17 · green card filings: 5","filings_12m":17,"filings_prev_12m":8,"green_card_filings_12m":5,"median_offered_wage_usd":152500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":5}],"liveness":null,"pay":{"stated_usd_annual":165000,"is_top_pay":true},"html_url":"https://alion.io/job/skechers-detection-and-automation-engineer","json_url":"https://alion.io/job/skechers-detection-and-automation-engineer.json","meta":{"generated_at":"2026-10-28T17:26:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23734,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":715105},"rest":"https://alion.io/mcp/rest/get_company?id=715105"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fskechers-detection-and-automation-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fskechers-detection-and-automation-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fskechers-detection-and-automation-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/skechers-detection-and-automation-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fskechers-detection-and-automation-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":885159}},{"tool":"search_jobs","arguments":{"company":"skechers.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":885159},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}