Senior Threat Detection Architect

Thomson Reuters; Richmond (VA); On-site; USD 118,000 - 220,000; Full time

Benefits offered by this job

Hybrid Work Model

Flexibility & Work-Life Balance

Career Development

Industry Benefits

Job summary

Thomson Reuters is seeking a Lead Cyber Threat Management Analyst to design, develop, and improve advanced threat detection capabilities across the enterprise. You will operationalize threat intel and build scalable detection logic to strengthen security monitoring and response.

This hands-on technical leadership role requires translating adversary behavior into practical use cases, collaborating with Security Operations, Incident Response, Threat Intelligence, and cloud teams, and maturing the

Qualifications

• 5+ years in threat detection, security operations, or related cybersecurity disciplines.
• Experience building and tuning detection across SIEM/EDR and cloud security tools.
• Ability to translate threat intelligence into practical detection use cases.
• Strong MITRE ATT&CK knowledge with mapping and coverage analysis.
• Scripting in Python/PowerShell to automate workflows.

Responsibilities

• Architect and maintain scalable threat detection logic across SIEM, EDR, and cloud platforms.
• Design content to identify threats while minimizing false positives.
• Map detections to MITRE ATT&CK and assess coverage.
• Operationalize threat intelligence into detection strategies.
• Collaborate with teams to validate detections and improve response workflows.
• Lead detection workflow optimization and automation for faster investigations.
• Evaluate detection performance via analytics and simulations.

Skills

Threat detection

Security operations

Incident response

Threat intelligence

MITRE ATT&CK

Python scripting

Automation workflows

Communication skills

Leadership

Tools

SIEM

EDR

Cloud security tools

SOAR

XDR

Job description

Thomson Reuters is seeking a Lead Cyber Threat Management Analyst to design, develop, and improve advanced threat detection capabilities across the enterprise. You will operationalize threat intel and build scalable detection logic to strengthen security monitoring and response.

This hands-on technical leadership role requires translating adversary behavior into practical use cases, collaborating with Security Operations, Incident Response, Threat Intelligence, and cloud teams, and maturing the