Cyber Security Engineer - Threat Detection - Hybrid

SMBC•Charlotte, NC

2d•Hybrid

About The Position

Genesis10 is seeking a Cyber Security Engineer - Threat Detection for a Global Financial Institution. This is a hybrid 6+ month contract opportunity. This role is part of a high-performing Security Operations team responsible for advancing the organization's security monitoring, detection engineering, and cyber defense capabilities. The successful candidate will focus on building, tuning, and maintaining effective detections across cloud and on-premises environments to proactively identify, investigate, and respond to threats.

Requirements

Minimum of 3 years of relevant cybersecurity, detection engineering, SOC engineering, security analytics, or security operations experience
Hands-on experience analyzing logs and security telemetry from multiple sources, including endpoint, network, identity, cloud, infrastructure, and application platforms
Experience with cloud SIEM, UEBA, EDR, SOAR, data lake, or related detection and monitoring technologies
Strong knowledge of query languages and data analysis techniques
Experience developing detection-as-code pipelines, automation, or scripts
Ability to translate threat intelligence and adversary behaviors into practical detections
Experience mapping detections to MITRE ATT&CK or similar security frameworks
Working knowledge of Windows and Linux operating systems, common enterprise infrastructure, and cloud environments
Strong troubleshooting, analytical, and problem-solving skills
Strong documentation, communication, and collaboration skills

Nice To Haves

Additional cybersecurity experience in incident response, threat intelligence, vulnerability management, security engineering, or cloud security is a plus

Responsibilities

Design, develop, tune, and maintain threat detection logic across cloud and on-premises environments to improve visibility, alert quality, and response effectiveness
Build and maintain efficient data ingestion and log onboarding pipelines for security-relevant telemetry
Partner with threat intelligence teams to translate emerging threats and attacker techniques into actionable detection strategies
Collaborate with security analysts, incident responders, and technology teams to investigate detections and reduce time to detect and respond
Develop and fine-tune detection rules, signatures, correlation logic, and alerting thresholds to reduce false positives
Map detections and coverage to relevant frameworks, including MITRE ATT&CK
Use automation, scripting, and detection-as-code practices to improve the lifecycle management of detection content
Evaluate security monitoring technologies, data sources, and analytics capabilities to identify opportunities for enhancement
Ensure detection engineering practices align with applicable compliance and regulatory requirements
Create and maintain clear documentation for detection logic, data sources, and operational procedures
Continuously assess the effectiveness of cybersecurity monitoring controls

Benefits

Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years.
The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.
Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
Behavioral Health Platform
Medical, Dental, Vision
Health Savings Account
Voluntary Hospital Indemnity (Critical Illness & Accident)
Voluntary Term Life Insurance
401K
Sick Pay (for applicable states/municipalities)
Commuter Benefits (Dallas, NYC, SF, and Illinois)