Jobs › T-Mobile

Sr Engineer, Cybersecurity – SOC Process and AI Enablement

T-Mobile · Downers Grove, IL · $103,400–$186,400 a year · Full time

Posted Aug 21, 2026 · We last checked this listing on Oct 6, 2026

Apply at T-Mobile

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a process you redesigned that measurably cut response time.

What they are checking: Whether they have delivered real, measured efficiency gains in a security setting.

Tell me about working with teams outside cybersecurity to deliver a project.

What they are checking: Whether they can partner across the business, which the posting names as part of success.

What would you do

The posting mentions use case review and de-duplication for AI adoption. How would you set up governance so teams aren't building the same thing twice?

What they are checking: Whether they can create a practical intake and review process that scales AI responsibly.

Analysts push back on a new process, saying it adds steps. How do you handle it?

What they are checking: Whether they can win adoption by listening and adjusting instead of forcing change.

How would you decide which of several new initiatives to lead first?

What they are checking: Whether they prioritize by risk and impact to the threat response organization.

About the work

Your job is to make the SOC and incident response teams faster. Walk me through how you'd find the biggest bottleneck in a threat response process.

What they are checking: Whether they can measure and map a process to find where time is really lost.

How would you decide whether a SOC task is a good candidate for automation or AI?

What they are checking: Whether they can weigh volume, risk and accuracy before automating, which the governance part of the role needs.

What metrics would you use to show the SOC is getting better, like MTTD or MTTR?

What they are checking: Whether they can define data that supports decisions, which the role says success is measured by.

What risks come with using AI in triage or incident response, and how would you manage them?

What they are checking: Whether they understand issues like false negatives, hallucinations and data exposure in security workflows.

What experience do you have with SOAR platforms, SIEM tools or writing automation playbooks?

What they are checking: Whether they have hands-on technical depth, since the role pairs process work with building automation.

How do you document threat response processes so they're actually used during a real incident?

What they are checking: Whether they write clear, usable runbooks rather than documents nobody reads under pressure.

Practice this interview out loud.

Offer builds a real interview for this exact role at T-Mobile from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by T-Mobile.

At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees! Job Overview This role drives efficiency and faster response for the Security Operations Center (SOC) and incident response teams by designing smarter processes and the analytics that guide them. It leads projects and new initiatives that advance the Threat Response Organization and governs how automation and AI are adopted across it, including use case review, de-duplication, and strategic alignment. The role is distinguished by pairing hands-on process, automation, and AI work with the judgment to scale it responsibly. Success is measured by gains in response speed and operational efficiency, the quality of data-driven decisions, and delivery in close partnership with teams across cybersecurity and the broader business. The work strengthens the organization's resilience to cyber incidents and elevates how every response team detects and responds. Job Responsibilities • Designs, improves, and documents threat response processes, and trains and upskills the team on new processes, automation, and AI to increase efficiency and speed for the SOC and incident response teams • Governs automation and AI adoption across threat response, including use case review, de-duplication, and strategic alignment • Partners with teams across cybersecurity and other areas of the business to deliver these solutions and align them with organizational goals and priorities • Leads projects and new initiatives that advance the capabilities of the Threat Response Organization • Builds and integrates automation and AI, including SOAR and modern AI tooling, into response workflows to reduce manual effort • Develops data, reporting, and visibility that drive decision making and surface opportunities for new initiatives • Participates in other duties or projects as assigned by business management as needed Education and Experience • Bachelor's Degree plus 5 years of related work experience OR Advanced degree with 3 years of related experience (required) • Acceptable areas of study include Computer Science or Information Technology. (required) • 4-7 years e xperience with security related software and/or business process design(preferred) • 4-7 years e xperience in technical project management and leading cross-functional solution design teams (preferred) • 3-5 years h ands-on experience automating security and operational workflows with SOAR/automation platforms and scripting (for example, Python and APIs) (preferred) • 2-4 years e xperience working with SIEM and detection tooling (for example, Splunk or Microsoft Sentinel) and translating findings into process and reporting improvements (preferred) • 1-3 years h ands-on experience applying modern AI tools (for example, Claude and other large language models) to security or operational workflows (preferred) Required Knowledge, Skills and Abilities • Artificial Intelligence (AI) • Cybersecurity • Security Automation • Security Engineering and Testing • Security Incident and Escalation Management • Security Technologies • Stakeholder Management • Threat Modeling • Process Design & Improvement • Data Analytics & Reporting Licenses and Certifications • Certified Information Systems Security Professional (CISSP) • Certified Information Security Manager (CISM) ) • Certified in Risk & Informaitonal Systems Control (CRISC) • At least 18 years of age • Legally authorized to work in the United States Travel : Travel Required (Yes/No):Yes DOT Regulated : DOT Regulated Position (Yes/No):No Safety Sensitive Position (Yes/No):No ***The base pay range below is the National Pay Range - to find out the range for the location listed, please click on the link in the second paragraph below.***** Total Target Cash Earnings Opportunity: $118,910 - $214,360 National Base Pay Range: $103,400 - $186,400 The Total Target Cash Earnings Opportunity represents the expected total cash compensation for this role at target performance, combining base salary and annual incentive opportunity. Actual earnings may be higher or lower depending on individual performance and overall company results. The base pay range reflects the compensation component of this opportunity. The candidate’s actual pay will be based on various factors, such as work location, qualifications, and experience, so the actual starting pay will vary within this range. To find the pay range for this role based on hiring location, https://paylookup.t-mobile.com/paylookup?reqID=REQ363187&paradox=1 At T-Mobile, employees in regular, non-temporary roles are eligible for an annual bonus or periodic sales incentive or bonus, based on their role. Corporate employees are eligible for a year-end bonus based on individual and/or company performance and which is set at a percentage of the employee’s eligible earnings in the prior year. Certain positions in Customer Care are eligible for monthly bonuses based on individual and/or team performance. The incentive component included in the Total Target Cash Earnings Opportunity reflects target performance. Actual earnings included in the Total Target Cash Earnings Opportunity reflect target performance; actual payouts may vary. At T-Mobile, our benefits exemplify the spirit of One Team, Together! A big part of how we care for one another is working to ensure our benefits evolve to meet the needs of our team members. Full and part-time employees have access to the same benefits when eligible. We cover all of the bases, offering medical, dental and vision insurance, a flexible spending account, 401(k), employee stock grants, employee stock purchase plan, paid time off and up to 12 paid holidays - which total about 4 weeks for new full-time employees and about 2.5 weeks for new part-time employees annually - paid parental and family leave, family building benefits, back-up care, enhanced family support, childcare subsidy, tuition assistance, college coaching, short- and long-term disability, voluntary AD&D coverage, voluntary accident coverage, voluntary life insurance, voluntary disability insurance, and voluntary long-term care insurance. We don't stop there - eligible employees can also receive mobile service & home internet discounts, pet insurance, and access to commuter and transit programs! To learn about T-Mobile’s amazing benefits, check out www.t-mobilebenefits.com . Never stop growing! As part of the T-Mobile team, you know the Un-carrier doesn’t have a corporate ladder–it’s more like a jungle gym of possibilities! We love helping our employees grow in their careers, because it’s that shared drive to aim high that drives our business and our culture forward. By applying for this career opportunity, you’re living our values while investing in your career growth–and we applaud it. You’re unstoppable! T-Mobile USA, Inc. is an Equal Opportunity Employer. All decisions concerning the employment relationship will be made without regard to age, race, ethnicity, color, religion, creed, sex, sexual orientation, gender identity or expression, genetic information, national origin, religious affiliation, marital status, citizenship status, veteran status, the presence of any physical or mental disability, or any other status or characteristic protected by federal, state, or local law. Discrimination, retaliation or harassment based upon any of these factors is wholly inconsistent with how we do business and will not be tolerated. Talent comes in all forms at the Un-carrier. If you are an individual with a disability and need reasonable accommodation at any point in the application or interview process, please let us know by emailing ApplicantAccommodation@t-mobile.com or calling 1-844-873-9500. Please note, this contact channel is not a means to apply for or inquire about a position and we are unable to respond to non-accommodation related requests.

Apply at T-Mobile