Malvern, PA · On-site
Senior AI Threat Detection Engineer Location: Malvern, PA - Primary | Plano, TX - Secondary Option Position W2 We are seeking a Senior AI Threat Detection Engineer to support Security Operations ...
Quick apply
Malvern, PA · On-site
Senior AI Threat Detection Engineer Location: Malvern, PA - Primary | Plano, TX - Secondary Option Position W2 We are seeking a Senior AI Threat Detection Engineer to support Security Operations ...
The Threat Detection Engineer chooses among AI-assisted methods, deterministic automation and process changes based on the problem, risk and expected value. This is a hands-on technical leadership ...
The Threat Detection Engineer chooses among AI-assisted methods, deterministic automation and process changes based on the problem, risk and expected value. This is a hands-on technical leadership ...
The Threat Detection Engineer chooses among AI-assisted methods, deterministic automation and process changes based on the problem, risk and expected value. This is a hands-on technical leadership ...
The Threat Detection Engineer chooses among AI-assisted methods, deterministic automation and process changes based on the problem, risk and expected value. This is a hands-on technical leadership ...
Washington, DC · On-site
$160 - $180/hr
The Threat Detection Engineer is a hands-on technical leader who strengthens how Carlyle identifies, understands and detects cyber threats. Reporting to the AVP, Threat Detection and Intelligence ...
Washington, DC · On-site
$160 - $180/hr
The Threat Detection Engineer is a hands-on technical leader who strengthens how Carlyle identifies, understands and detects cyber threats. Reporting to the AVP, Threat Detection and Intelligence ...
Washington, DC · On-site
$140 - $190/hr
Translate the Threat Detection and Intelligence strategy into an actionable roadmap and prioritized backlog * Build partnerships across incident response, vulnerability management, engineering ...
Washington, DC · On-site
$140 - $190/hr
Translate the Threat Detection and Intelligence strategy into an actionable roadmap and prioritized backlog * Build partnerships across incident response, vulnerability management, engineering ...
Threat Detection Engineer Who We Are Legato Security is an information security firm founded upon the belief that every organization has the right to keep its data private and secure. Our mission is ...
Threat Detection Engineer Who We Are Legato Security is an information security firm founded upon the belief that every organization has the right to keep its data private and secure. Our mission is ...
Washington, DC · On-site
$160 - $180/hr
The Threat Detection Engineer chooses among AI‑assisted methods, deterministic automation and process changes based on the problem, risk and expected value. This is a hands‑on technical ...
Washington, DC · On-site
$160 - $180/hr
The Threat Detection Engineer chooses among AI‑assisted methods, deterministic automation and process changes based on the problem, risk and expected value. This is a hands‑on technical ...
Bellevue, WA · On-site
$128K - $176K/yr
As a Senior Threat Detection Engineer, you will take ownership of technical areas, leading initiatives to enhance threat detection and collaborate across teams to ensure security for Salesforce ...
Bellevue, WA · On-site
$128K - $176K/yr
As a Senior Threat Detection Engineer, you will take ownership of technical areas, leading initiatives to enhance threat detection and collaborate across teams to ensure security for Salesforce ...
Sarasota, FL · On-site
$120 - $180/hr
... skilled Threat Detection Engineer to join our growing Security Operations team. In this critical role, you will be responsible for proactively identifying and mitigating security threats by ...
Sarasota, FL · On-site
$120 - $180/hr
... skilled Threat Detection Engineer to join our growing Security Operations team. In this critical role, you will be responsible for proactively identifying and mitigating security threats by ...
Kansas City, MO · On-site
$120 - $180/hr
... skilled Threat Detection Engineer to join our growing Security Operations team. In this critical role, you will be responsible for proactively identifying and mitigating security threats by ...
Kansas City, MO · On-site
$120 - $180/hr
... skilled Threat Detection Engineer to join our growing Security Operations team. In this critical role, you will be responsible for proactively identifying and mitigating security threats by ...
Threat Detection Engineer Who We Are Legato Security is an information security firm founded upon the belief that every organization has the right to keep its data private and secure. Our mission is ...
Threat Detection Engineer Who We Are Legato Security is an information security firm founded upon the belief that every organization has the right to keep its data private and secure. Our mission is ...
$129K - $177K/yr
As a Senior Threat Detection Engineer, you will take on complete ownership of a technical area, responsible for delivering all necessary research and features to achieve our team's goals in that area.
$129K - $177K/yr
As a Senior Threat Detection Engineer, you will take on complete ownership of a technical area, responsible for delivering all necessary research and features to achieve our team's goals in that area.
Sarasota, FL · On-site
Tenex is seeking a highly motivated and skilled Threat Detection Engineer to join our growing Security Operations team. In this critical role, you will be responsible for proactively identifying and ...
Sarasota, FL · On-site
Tenex is seeking a highly motivated and skilled Threat Detection Engineer to join our growing Security Operations team. In this critical role, you will be responsible for proactively identifying and ...
Irving, TX · On-site +1
$139K - $231K/yr
McKesson's Lead Threat Detection Engineer will be a member of our global cyber threat intelligence, incident response, analytics, and engineering team responsible for advancing our detection ...
Irving, TX · On-site +1
$139K - $231K/yr
McKesson's Lead Threat Detection Engineer will be a member of our global cyber threat intelligence, incident response, analytics, and engineering team responsible for advancing our detection ...
Irving, TX · On-site +1
$139K - $231K/yr
McKesson's Lead Threat Detection Engineer will be a member of our global cyber threat intelligence, incident response, analytics, and engineering team responsible for advancing our detection ...
Irving, TX · On-site +1
$139K - $231K/yr
McKesson's Lead Threat Detection Engineer will be a member of our global cyber threat intelligence, incident response, analytics, and engineering team responsible for advancing our detection ...
Irving, TX · On-site +1
$139K - $231K/yr
McKesson's Lead Threat Detection Engineer will be a member of our global cyber threat intelligence, incident response, analytics, and engineering team responsible for advancing our detection ...
Irving, TX · On-site +1
$139K - $231K/yr
McKesson's Lead Threat Detection Engineer will be a member of our global cyber threat intelligence, incident response, analytics, and engineering team responsible for advancing our detection ...
The Principal AI Threat Detection Engineer serves as the subject matter expert for Insider Threat tooling, User and Entity Behavior Analytics (UEBA), Security Orchestration Automation and Response ...
The Principal AI Threat Detection Engineer serves as the subject matter expert for Insider Threat tooling, User and Entity Behavior Analytics (UEBA), Security Orchestration Automation and Response ...
The Principal AI Threat Detection Engineer serves as the subject matter expert for Insider Threat tooling, User and Entity Behavior Analytics (UEBA), Security Orchestration Automation and Response ...
The Principal AI Threat Detection Engineer serves as the subject matter expert for Insider Threat tooling, User and Entity Behavior Analytics (UEBA), Security Orchestration Automation and Response ...
Birmingham, AL · On-site
Knowledge of detection engineering principles, threat hunting, and alert tuning to improve detection fidelity and reduce false positives. * Experience mapping detections to the MITRE ATT&CK framework ...
Birmingham, AL · On-site
Knowledge of detection engineering principles, threat hunting, and alert tuning to improve detection fidelity and reduce false positives. * Experience mapping detections to the MITRE ATT&CK framework ...
Bachelor's degree in Computer Science, Cybersecurity, Information Security, Data Engineering, or a related field, or equivalent experience. * 7+ years of experience in insider threat, detection ...
Bachelor's degree in Computer Science, Cybersecurity, Information Security, Data Engineering, or a related field, or equivalent experience. * 7+ years of experience in insider threat, detection ...
A Threat Detection Engineer is responsible for identifying, analyzing, and mitigating potential security threats within an organization’s systems and networks. They develop and implement detection strategies, create alerts for suspicious activities, and fine-tune security tools to improve threat visibility. Additionally, they collaborate with security teams to investigate incidents and enhance overall cybersecurity defenses. Their goal is to ensure early detection and response to cyber threats, minimizing potential damage.
A typical day for a Threat Detection Engineer involves monitoring security alerts, analyzing network and endpoint data, performing threat hunting activities, and triaging incidents for further investigation. You’ll regularly collaborate with other cybersecurity team members to develop detection rules, improve automated response processes, and stay up-to-date with emerging threat trends. Expect to participate in incident response drills and contribute to documentation and knowledge sharing within your organization. The environment is often fast-paced and requires a mix of independent analysis and teamwork to protect critical assets effectively.
To thrive as a Threat Detection Engineer, you need a solid understanding of network security, cybersecurity frameworks, threat analysis, and incident response, often backed by a degree in computer science or a related field. Hands-on experience with SIEM tools (such as Splunk or QRadar), intrusion detection/prevention systems, malware analysis platforms, and certifications like CISSP or GIAC are highly valued. Strong analytical thinking, effective communication skills, and a proactive mindset make someone stand out in this role. These skills are crucial for accurately identifying and responding to cyber threats in a timely manner while collaborating with security teams.
Cities with the most Threat Detection Engineer job openings:
The most popular types of Threat Detection Engineer jobs are:
States with the most job openings for Threat Detection Engineer jobs include:
The top searched job categories for Threat Detection Engineer jobs are:
Full-time
Re-posted 23 days ago
Job Title: Senior AI Threat Detection Engineer
Location: Malvern, PA – Primary | Plano, TX – Secondary Option
Position W2
Job Description
We are seeking a Senior AI Threat Detection Engineer to support Security Operations Center modernization initiatives. The ideal candidate will have strong experience in SOC operations, detection engineering, cloud security, automation, and hands-on programming. This role will focus on developing AI-driven security capabilities, improving threat detection, automating SOC workflows, and building secure, scalable solutions using modern engineering practices.
The consultant will work closely with security engineering, SOC, platform, and cross-functional teams to design and implement AI-enabled solutions that improve incident response, reduce manual effort, and strengthen overall security operations.
Key Responsibilities
Lead response efforts for escalated cybersecurity alerts, incidents, and security investigations.
Analyze complex attack patterns in real time and recommend effective mitigation strategies.
Develop, maintain, and enhance detection logic, alerts, rules, policies, and signatures across security platforms.
Support monitoring and detection of cyber threats, vulnerabilities, risks, and threat actor tactics, techniques, and procedures.
Build and enhance AI agents to streamline SOC operations and improve analyst efficiency.
Design and optimize prompts, workflows, and use cases for LLM-based security solutions.
Build APIs, integrations, and automation workflows to support AI-driven threat detection capabilities.
Develop clean, maintainable, production-ready code following engineering best practices.
Implement safeguards, controls, and responsible AI practices for secure AI usage within security operations.
Evaluate emerging AI, GenAI, and automation technologies and recommend improvements for SOC modernization.
Collaborate with SOC, security engineering, cloud, platform, and application teams to deliver scalable AI-enabled solutions.
Support deployment and continuous improvement of AI agents across SOC use cases.
Mentor junior team members and help improve overall technical capability within the team.
Participate in special security projects and support additional responsibilities as needed.
Required Qualifications
4+ years of hands-on programming or scripting experience using Python, Java, Shell, or similar languages.
5+ years of experience working with cloud platforms such as AWS or Microsoft Azure.
4+ years of experience building or supporting automation solutions such as SOAR, GitHub workflows, CI/CD automation, or similar platforms.
4+ years of experience working with security technologies or supporting SOC/security operations.
5+ years of exposure to SIEM platforms, detection engineering, or security monitoring concepts.
Strong understanding of security telemetry, including logs, alerts, endpoint data, network data, and cloud security data.
Experience supporting incident response, threat detection, alert tuning, and security investigation workflows.
Exposure to AI, GenAI, LLM-based solutions, or AI agent development.
Strong API integration, automation, and workflow development experience.
Ability to work with cross-functional teams and communicate technical findings clearly.
Preferred Skills
Hands-on experience developing AI or GenAI solutions for cybersecurity use cases.
Experience with prompt engineering, AI agents, and LLM-based workflow automation.
Experience with SOAR platforms and security orchestration.
Knowledge of MITRE ATT&CK, threat actor TTPs, and modern detection engineering practices.
Experience with cloud security monitoring, security data pipelines, and scalable automation frameworks.
Strong understanding of responsible AI, security controls, and risk mitigation for AI-based systems.
Ideal Candidate
The ideal candidate is a senior-level security engineer with strong programming, cloud, automation, and SOC experience. They should be comfortable building AI-driven security solutions, working with security telemetry, improving detection workflows, and collaborating with engineering teams to deliver production-ready capabilities.
