> Markdown version of [/jobs/ext/4517834-cyber-security-engineer-threat-detection-hybrid](https://www.wearedevelopers.com/jobs/ext/4517834-cyber-security-engineer-threat-detection-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Engineer - Threat Detection - Hybrid

- **Company:** Genesis10
- **Location:** Charlotte, NC, United States
- **Experience:** Experienced
- **Salary:** $134,826.0
- **Contract:** Temporary contract
- **Skills:** Data Analysis, Cloud Computing, Cloud Computing Security, Cyber Security, Query Languages, Linux, Monitoring of Systems, Intrusion Detection and Prevention, Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, Data Ingestion, Mitre Att&ck, Software Troubleshooting, Cyber Threat Analysis, Data Lakes, Data Analytics, Cyber Warfare, Security Orchestration, Automation & Response
- **Published:** November 1, 2026
- **Apply:** https://www.juju.com/job/16_c395c33a

## About the Role

* Minimum of 3 years of relevant cybersecurity, detection engineering, SOC engineering, security analytics, or security operations experience
 * Hands-on experience analyzing logs and security telemetry from multiple sources, including endpoint, network, identity, cloud, infrastructure, and application platforms
 * Experience with cloud SIEM, UEBA, EDR, SOAR, data lake, or related detection and monitoring technologies
 * Strong knowledge of query languages and data analysis techniques
 * Experience developing detection-as-code pipelines, automation, or scripts
 * Ability to translate threat intelligence and adversary behaviors into practical detections
 * Experience mapping detections to MITRE ATT&CK or similar security frameworks
 * Working knowledge of Windows and Linux operating systems, common enterprise infrastructure, and cloud environments
 * Strong troubleshooting, analytical, and problem-solving skills
 * Strong documentation, communication, and collaboration skills

Desired skills:

 * Additional cybersecurity experience in incident response, threat intelligence, vulnerability management, security engineering, or cloud security is a plus

## Description

This role is part of a high-performing Security Operations team responsible for advancing the organization's security monitoring, detection engineering, and cyber defense capabilities. The successful candidate will focus on building, tuning, and maintaining effective detections across cloud and on-premises environments to proactively identify, investigate, and respond to threats., * Design, develop, tune, and maintain threat detection logic across cloud and on-premises environments to improve visibility, alert quality, and response effectiveness

 * Build and maintain efficient data ingestion and log onboarding pipelines for security-relevant telemetry
 * Partner with threat intelligence teams to translate emerging threats and attacker techniques into actionable detection strategies
 * Collaborate with security analysts, incident responders, and technology teams to investigate detections and reduce time to detect and respond
 * Develop and fine-tune detection rules, signatures, correlation logic, and alerting thresholds to reduce false positives
 * Map detections and coverage to relevant frameworks, including MITRE ATT&CK
 * Use automation, scripting, and detection-as-code practices to improve the lifecycle management of detection content
 * Evaluate security monitoring technologies, data sources, and analytics capabilities to identify opportunities for enhancement
 * Ensure detection engineering practices align with applicable compliance and regulatory requirements
 * Create and maintain clear documentation for detection logic, data sources, and operational procedures
 * Continuously assess the effectiveness of cybersecurity monitoring controls