Senior Threat Detection Engineer

Habitat For Humanity Of Durham; Raleigh (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Truist Financial Corporation in North Carolina seeks a Senior Threat Detection Engineer to design, develop, and optimize enterprise-grade detections across security platforms. The role emphasizes hands-on detection engineering, data pipelines, and analytics in regulated environments.

You will work with Splunk, Snowflake/Snowpipe for ingestion and detection development, and explore Cribl/Databahn for scalable telemetry routing. Strong collaboration with SOC/IR teams is essential.

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• 7+ years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Design, develop, and maintain high-fidelity detections across Splunk, Snowflake, and related platforms.
• Author SPL-based detections and SQL-based queries for detection development.
• Snowflake Engineering: design and optimize queries; maintain Snowpipe pipelines for real-time and batch ingestion.
• Pipeline Engineering: design and maintain integrations with Cribl/Databahn for log routing and enrichment.
• Provide administrative expertise for Splunk and Snowflake environments; ensure resilience and performance.
• Map detections to the MITRE ATT&CK framework; align with regulatory requirements.
• Anvilogic-driven detection engineering: use detection-as-code workflows; lifecycle management.
• Collaborate with SOC, IR, Threat Intel, and Data Engineering teams to minimize false positives.

Skills

Threat detection

Detection engineering

MITRE ATT&CK

Data pipelines

Anvilogic

Splunk SPL

SQL

Snowflake

Snowpipe

Cribl/Databahn

Regulatory compliance

Python

Docker/Kubernetes

Education

Bachelor’s degree

Tools

Splunk

Snowflake

Snowpipe

Anvilogic

Cribl

Job description

Truist Financial Corporation in North Carolina seeks a Senior Threat Detection Engineer to design, develop, and optimize enterprise-grade detections across security platforms. The role emphasizes hands-on detection engineering, data pipelines, and analytics in regulated environments.

You will work with Splunk, Snowflake/Snowpipe for ingestion and detection development, and explore Cribl/Databahn for scalable telemetry routing. Strong collaboration with SOC/IR teams is essential.