> Markdown version of [/jobs/ext/1971312-senior-security-engineer-threat-engineering-detection-team](https://www.wearedevelopers.com/jobs/ext/1971312-senior-security-engineer-threat-engineering-detection-team). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer- Threat Engineering Detection Team

- **Company:** Truist Inc
- **Location:** Charlotte, NC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cyber Security, Information Engineering, Intrusion Detection and Prevention, PostgreSQL, Microsoft SQL Server, MySQL, PCI Data Security Standards, Software Engineering, SQL Databases, Snowflake, Mitre Att&ck, Cyber Threat Analysis, Splunk
- **Published:** August 7, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/senior-security-engineer-threat-engineering-detection-team-charlotte-nc-usa-58837723

## About the Role

aaal_ * Provide platform administration for Splunk and Snowflake * Map detections to MITRE ATT&CK framework and ensure comprehensive coverage * Utilize Anvilogic for detection-as-code, lifecycle management, and cross-platform orchestration * Collaborate with SOC, IR, Threat Intel, Red/Purple, and Data Engineering to reduce false positives and improve visibility * Engineer regulatory-aligned detections with PCI-DSS, HIPAA, SOX, GLBA Tasks * Bachelor's degree or equivalent * Minimum 7 years in security engineering or related cybersecurity roles * Deep knowledge of cybersecurity principles and concepts * Experience with software development lifecycle security practices * Strong threat modeling, security testing, and pentesting knowledge * Experience implementing and managing complex information security technologies Key requirements * medical, dental, vision * 401k plan * vacation * sick days * paid holidays * disability insurance

## Description

Experteer Overview As a Senior Threat Detection Engineer, you design and optimize enterprise-grade detections across security platforms to bolster threat visibility. You work closely with SOC, IR, and data teams to implement detection-as-code and scalable telemetry pipelines. You map detections to MITRE ATT&CK and align solutions with regulatory requirements in highly regulated industries. Your work focuses on reducing false positives, improving coverage, and enabling rapid, cross-platform deployment. This role offers impact at scale in a security-driven, collaborative environment. Compensation / Benefits * Design, develop, and maintain high-fidelity detections across Splunk, Snowflake, and related platforms * Author SPL-based detections (Splunk) and SQL-based queries (Snowflake, MySQL, PostgreSQL, SQL Server) * Optimize Snowflake queries and manage Snowpipe pipelines for real-time and batch ingestion * Plan and implement Cribl/Databahn integrations for log routing and telemetry enrichment * Provide platform administration for Splunk and Snowflake * Map detections to MITRE ATT&CK framework and ensure comprehensive coverage * Utilize Anvilogic for detection-as-code, lifecycle management, and cross-platform orchestration * Collaborate with SOC, IR, Threat Intel, Red/Purple, and Data Engineering to reduce false positives and improve visibility * Engineer regulatory-aligned detections with PCI-DSS, HIPAA, SOX, GLBA Tasks * Bachelor's degree or equivalent * Minimum 7 years in security engineering or related cybersecurity roles * Deep knowledge of cybersecurity principles and concepts * Experience with software development lifecycle security practices * Strong threat modeling, security testing, and pentesting knowledge * Experience implementing and managing complex information security technologies Key requirements * medical, dental, vision * 401k plan * vacation * sick days * paid holidays * disability insurance


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling)
- [Coding for Good: Achieving social change with an app](https://www.wearedevelopers.com/videos/1645-coding-for-good-achieving-social-change-with-an-app)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)