Hybrid Threat Detection Engineer (Charlotte)

Zohorecruit; Charlotte (NC); Hybrid; USD 105,000 - 155,000; Full time

Job summary

Axiom Path is recruiting for a threat detection engineer within a global financial services organization in Charlotte, NC. You will design and tune detections across cloud and on-premises environments, collaborate with SOC analysts, threat intelligence, and incident response teams, and continually improve monitoring efficacy.

The role emphasizes automation, detection-as-code, and measurable improvements in alert quality and coverage, with hybrid work in Charlotte, NC.

Qualifications

• 3+ years in detection engineering, SOC engineering, security analytics, or related field.
• Hands-on with logs/telemetry from endpoint, network, identity, cloud, and infrastructure.
• Experience with SIEM, UEBA, EDR, SOAR or similar security-monitoring tech.
• Strong knowledge of security query languages and data-analysis methods.
• Experience building automation, scripts, and detection-as-code pipelines.
• Ability to map threat intelligence and attacker behaviours to practical detections.
• Experience mapping detections to MITRE ATT&CK framework.
• Clear written and verbal communication; can document detection logic clearly.

Responsibilities

• Design, develop, test, tune, and maintain threat detection logic across cloud and on-premises environments.
• Improve alert quality, monitoring visibility, and detection capabilities.
• Build and maintain data onboarding for endpoint, network, identity, cloud telemetry.
• Translate threat intel into actionable monitoring use cases.
• Develop correlation rules, signatures, and thresholds to reduce false positives.
• Collaborate with SOC analysts to investigate alerts and close gaps.
• Map detection logic to MITRE ATT&CK and related frameworks.
• Apply automation and detection-as-code to improve scalability.

Skills

Threat detection

Security analytics

SOC engineering

Automation

MITRE ATT&CK

Log analysis

Scripting

Incident response

Tools

SIEM

UEBA

EDR

SOAR

Job description

Axiom Path is recruiting for a threat detection engineer within a global financial services organization in Charlotte, NC. You will design and tune detections across cloud and on-premises environments, collaborate with SOC analysts, threat intelligence, and incident response teams, and continually improve monitoring efficacy.

The role emphasizes automation, detection-as-code, and measurable improvements in alert quality and coverage, with hybrid work in Charlotte, NC.