Threat Detection Engineer | SOC Automation & MITRE ATT&CK

Sharp Decisions; Charlotte (NC); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Sharp Decisions is seeking a Cyber Security Engineer – Threat Detection in Charlotte, NC, operating in a hybrid model. The role focuses on building, tuning, and maintaining detection logic across cloud and on‑premises environments to proactively identify threats and drive fast response.

The ideal candidate has 3+ years of direct cybersecurity or detection engineering experience, with hands‑on telemetry, analytics, automation, and detection‑as‑code practices, collaborating with analysts and

Qualifications

• Minimum 3 years of direct cybersecurity, detection engineering, SOC engineering, or security analytics experience.

Responsibilities

• Design, develop, tune, and maintain threat detection logic across cloud and on‑premises environments.
• Build and maintain data ingestion pipelines for security telemetry from infrastructure, apps, endpoints, identity platforms, and cloud services.
• Partner with threat intelligence teams to translate threats into actionable detection strategies.
• Collaborate with analysts, incident responders, SOC engineers, and technology teams to investigate detections and reduce MTTD/MTTR.
• Develop and fine‑tune detection rules, signatures, and alerting thresholds to improve fidelity and reduce false positives.
• Map detections to MITRE ATT&CK to support monitoring and response improvements.
• Use automation and detection‑as‑code practices to improve content lifecycle management.
• Evaluate monitoring technologies and data sources to enhance detection coverage and efficiency.
• Ensure alignment with compliance and internal control requirements.
• Create and maintain clear documentation for detection logic and playbooks.
• Continuously assess monitoring controls to strengthen cyber resilience.

Skills

Detection engineering

SOC engineering

Security analytics

Threat detection

Automation

Telemetry data analysis

Job description

Sharp Decisions is seeking a Cyber Security Engineer – Threat Detection in Charlotte, NC, operating in a hybrid model. The role focuses on building, tuning, and maintaining detection logic across cloud and on‑premises environments to proactively identify threats and drive fast response.

The ideal candidate has 3+ years of direct cybersecurity or detection engineering experience, with hands‑on telemetry, analytics, automation, and detection‑as‑code practices, collaborating with analysts and