Senior Threat Detection Architect

Huntington-Bank; Dallas (TX); On-site; USD 70,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Wellness program

Life and disability insurance

Retirement savings plan

Paid leave and PTO

Job summary

Huntington Bank is seeking an Expert Threat Detection Analyst to develop and tune detections across SIEM, XDR, EDR, cloud, and network platforms. You will leverage threat intelligence, adversary tradecraft, and data analytics to improve visibility and reduce detection gaps.

The role involves design, testing, deployment, tuning, validation, and continuous improvement of threat detections, with collaboration across Incident Response, Threat Intelligence, Security Engineering, and IT Operations

Qualifications

• Bachelor's degree or 4+ years of equivalent experience preferred.
• High School Diploma or 8+ years of equivalent experience required.

Responsibilities

• Design, develop, test, deploy, and maintain threat detections across SIEM, XDR, EDR, cloud, and network platforms.
• Conduct detection engineering aligned to MITRE ATT&CK and attacker behaviors.
• Analyze threat intelligence and attack techniques to identify new detection opportunities.
• Perform detection validation through simulations, emulation, and testing.
• Tune detections to reduce false positives while maintaining efficacy.
• Collaborate with Incident Response, Threat Intelligence, and Security Operations teams.

Skills

Threat detection content development

MITRE ATT&CK

Threat intelligence

SPL/KQL analytics

Python/PowerShell scripting

Attack simulations/adversary emulation

Education

Bachelor's degree or 4+ years equivalent experience

High School Diploma or 8+ years equivalent experience

Tools

Palo Alto Cortex XSIAM

Microsoft Sentinel

Splunk

Microsoft Defender XDR

Job description

Huntington Bank is seeking an Expert Threat Detection Analyst to develop and tune detections across SIEM, XDR, EDR, cloud, and network platforms. You will leverage threat intelligence, adversary tradecraft, and data analytics to improve visibility and reduce detection gaps.

The role involves design, testing, deployment, tuning, validation, and continuous improvement of threat detections, with collaboration across Incident Response, Threat Intelligence, Security Engineering, and IT Operations