Hybrid Threat Detection Engineer – Charlotte

Axiom-Path; Charlotte (NC); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Axiom-Path in Charlotte, NC, is seeking a Threat Detection Engineer to join a fast-paced security operations team. You will design and tune detection logic across cloud and on‑prem environments, improving alert quality and response capabilities.

Responsibilities include log onboarding, translating threat intelligence into detections, and aligning coverage with MITRE ATT&CK. Strong scripting and automation enable scalable, repeatable processes. Hybrid work in Charlotte supported.

Qualifications

• At least 3 years of experience in detection engineering, SOC engineering, security analytics, or cybersecurity operations.
• Hands-on experience analyzing logs and telemetry from endpoint, network, identity, cloud, and infrastructure platforms.
• Experience with SIEM, UEBA, EDR, SOAR, and related monitoring technologies.
• Strong knowledge of security query languages and data-analysis methods for investigations.
• Experience developing automation, scripts, detection-as-code pipelines, or repeatable security processes.
• Ability to translate threat intelligence and attacker behaviors into practical detections.

Responsibilities

• Design, develop, test, tune, and maintain threat detection logic across cloud and on‑prem environments.
• Improve alert quality and monitoring visibility for faster response to malicious activity.
• Build and maintain log onboarding and data ingestion for telemetry sources.
• Translate threat intel into actionable monitoring use cases.
• Develop correlations, signatures, thresholds, and detection content to reduce false positives.
• Collaborate with SOC analysts and incident responders to validate coverage and gaps.
• Map detection logic to MITRE ATT&CK framework for alignment.
• Apply scripting and detection-as-code to improve testing, deployment, and scalability.
• Evaluate data sources and monitoring technologies for optimization.

Skills

Threat detection

Security analytics

SOC engineering

Detection engineering

MITRE ATT&CK mapping

Windows

Linux

Cloud security

Automation scripting

Tools

SIEM

UEBA

EDR

SOAR

Security data lakes

Job description

Axiom-Path in Charlotte, NC, is seeking a Threat Detection Engineer to join a fast-paced security operations team. You will design and tune detection logic across cloud and on‑prem environments, improving alert quality and response capabilities.

Responsibilities include log onboarding, translating threat intelligence into detections, and aligning coverage with MITRE ATT&CK. Strong scripting and automation enable scalable, repeatable processes. Hybrid work in Charlotte supported.