Lead Threat Detection Engineer

1P284 THE CARLYLE GROUP EMPLOYEE CO., LLC; Washington (District of Columbia); On-site; USD 160,000 - 180,000; Full time

Job summary

The Carlyle Group is seeking a Threat Detection Engineer to lead detection engineering and threat intelligence initiatives. You will transform intelligence into production detections and guide cross‑team collaboration to improve security operations and platform reliability.

In this in‑office role, you will own detection content from design through testing, deployment and retirement, while coaching contributors and driving Carlyle’s threat detection strategy.

Qualifications

• Bachelor’s degree required; cybersecurity, CS, or related field strongly preferred.
• 4+ years hands-on experience in threat detection engineering and cyber threat intelligence.
• Experience developing production detections and using intelligence to improve detection, hunting, or response.
• Hands-on with security telemetry across multiple domains; cloud telemetry is a plus.

Responsibilities

• Own detection content lifecycle from requirements to retirement; tune alerts and ensure context for investigations.
• Develop high‑fidelity detections across endpoint, identity, email, network, cloud, apps.
• Translate adversary behaviors and threat intel into testable detection hypotheses and analytics.
• Implement quality gates for detection content, including data validation and false-positive handling.
• Use detection‑as‑code for internal content; support tuning of vendor content where applicable.
• Coordinate targeted threat hunts with IR and security partners to validate hypotheses and derive durable detections.

Skills

Threat detection engineering

Threat intelligence

Automation & scripting

Cross-functional leadership

Communication

Education

Bachelor’s degree

Cybersecurity / CS focus

Advanced degree preferred

Security certifications preferred

Tools

SIEM

EDR/XDR

SOAR

APIs & data formats

Job description

The Carlyle Group is seeking a Threat Detection Engineer to lead detection engineering and threat intelligence initiatives. You will transform intelligence into production detections and guide cross‑team collaboration to improve security operations and platform reliability.

In this in‑office role, you will own detection content from design through testing, deployment and retirement, while coaching contributors and driving Carlyle’s threat detection strategy.