ZipRecruiter

Log In

1

Threat Detection Jobs (NOW HIRING)

Tenex.AI Inc

Threat Detection Engineer

Sarasota, FL · On-site

Tenex is seeking a highly motivated and skilled Threat Detection Engineer to join our growing Security Operations team. In this critical role, you will be responsible for proactively identifying and ...

Salesforce

Senior Threat Detection Engineer

Bellevue, WA · On-site

$128K - $176K/yr

As a Senior Threat Detection Engineer, you will take ownership of technical areas, leading initiatives to enhance threat detection and collaborate across teams to ensure security for Salesforce ...

previous pagenext page

Showing results 21-40

All JobsTechnology JobsThreat Detection Jobs

Threat Detection information

See salary details

$47

$60

$72

How much do threat detection jobs pay per hour?

As of Aug 23, 2026, the average hourly pay for threat detection in the United States is $60.46, according to ZipRecruiter salary data. Most workers in this role earn between $55.77 and $65.87 per hour, depending on experience, location, and employer.

What is threat detection?

Threat detection is the process of identifying potential security threats, such as cyberattacks, malware, or unauthorized access, within a network or system. Professionals in threat detection use various tools and techniques to monitor network activity, analyze data, and respond to suspicious behavior in real time. The goal is to detect threats early, minimize damage, and protect sensitive data and infrastructure from being compromised.

What are the key skills and qualifications needed to thrive as a threat detection specialist, and why are they important?

To thrive as a Threat Detection Specialist, you need a solid understanding of cybersecurity principles, network protocols, and incident response, often supported by a degree in computer science or related field and certifications like CompTIA Security+ or CISSP. Proficiency with security information and event management (SIEM) tools, intrusion detection systems (IDS), and malware analysis platforms is crucial. Analytical thinking, attention to detail, and effective communication are essential soft skills for identifying threats and collaborating with teams. These skills and qualifications are vital to proactively detect, analyze, and mitigate security threats, protecting organizational assets and data integrity.

What are the most common challenges faced by professionals in threat detection roles, and how can they be addressed?

Professionals in Threat Detection often face challenges such as staying updated with rapidly evolving cyber threats, managing large volumes of security alerts, and distinguishing real threats from false positives. Addressing these challenges typically involves continuous education, utilizing advanced threat intelligence tools, and collaborating closely with incident response and IT teams. Many organizations also encourage knowledge sharing among team members and participation in regular training to keep skills and threat awareness sharp.

What is the difference between Threat Detection vs Security Analyst?

AspectThreat DetectionSecurity Analyst
Required CredentialsCertifications like CompTIA Security+, CEH, CISSPCertifications like CISSP, CISA, Security+
Work EnvironmentSecurity operations centers, cybersecurity teamsIT departments, security teams, consulting firms
Employer & Industry UsageTech companies, finance, government agenciesAny organization with IT infrastructure
Common Search & ComparisonFocuses on identifying threats and vulnerabilitiesBroader role including incident response and policy development

Threat Detection specialists primarily focus on identifying and analyzing security threats using various tools and techniques. Security Analysts have a broader role that includes monitoring, analyzing, and responding to security incidents, often involving policy and compliance tasks. While both roles require similar certifications and work in cybersecurity environments, Threat Detection is more specialized in threat identification, whereas Security Analysts handle a wider range of security responsibilities.

More about Threat Detection jobs

What cities are hiring for Threat Detection jobs?

Cities with the most Threat Detection job openings:

What states have the most Threat Detection jobs?

States with the most job openings for Threat Detection jobs include:

What job categories do people searching Threat Detection jobs look for?

The top searched job categories for Threat Detection jobs are:

Threat Detection jobs near you
Infographic showing various Threat Detection job openings in the United States as of August 2026, with employment types broken down into 1% Internship, 1% As Needed, 84% Full Time, 11% Part Time, and 3% Contract. Highlights an 85% Physical, 4% Hybrid, and 11% Remote job distribution, with an average salary of $125,752 per year, or $60.5 per hour.

Manager, Threat Detection Engineering

Vangard, Inc.

Dallas, TX • On-site

Full-time

Posted 12 days ago

Job description

The Manager, Threat Detection Engineering leads a team of threat detection engineers within the Vanguard CSOC, responsible for the strategy, execution, and continuous maturation of the organization's threat detection capabilities. This role sits at the intersection of people leadership, technical excellence, and security strategy to guide a high-performing engineering team that translates adversary behaviors into high-fidelity, scalable detections across the full security stack. The manager will set team direction, drive measurable outcomes, and serve as a key stakeholder and partner across the CSOC including Threat Hunting, Adversary Emulation, Cyber Threat Intelligence, and Incident Management, to advance Vanguard's defensive posture against the evolving cybersecurity threat landscape.

Core Responsibilities

People Leadership

  • Lead, mentor, and develop a team of threat detection engineers, fostering a culture of technical excellence, continuous learning, and collaboration
  • Conduct regular 1:1s, performance reviews, and career development conversations to grow individual contributors and retain top talent
  • Identify skill gaps and build targeted training, development plans, and knowledge-sharing programs within the team
  • Drive hiring, onboarding, and team capacity planning in partnership with HR and senior leadership

Strategy & Program Ownership

  • Define and own the detection engineering roadmap, aligning team priorities to the broader CSOC strategy and Vanguard's risk posture
  • Develop and maintain the team's detection engineering framework, methodology, and standards across all platforms and workflows
  • Drive the team's MITRE ATT&CK coverage strategy, establishing measurable goals and tracking progress over time
  • Stay current on the evolving threat landscape and adversary tradecraft, ensuring the team's detection philosophy reflects emerging attacker behaviors
  • Champion detection-as-code adoption and engineering best practices across the CSOC

Execution & Delivery

  • Oversee the delivery of custom threat detection content across the full security stack, including SIEM, EDR, CNAPP, ITP, NIDS/NIPS, and SaaS security monitoring
  • platforms
  • Manage detection intake and prioritization from Purple Team and Red Team findings, threat intelligence, incident retrospectives, and investigation reviews
  • Ensure the team maintains structured development, review, and deployment pipelines for all detection content
  • Drive automation and orchestration initiatives using SOAR platforms, CI/CD pipelines, and AI-assisted tooling to improve team efficiency and detection velocity
  • Oversee development and maintenance of synthetic unit test frameworks for detection validation

Metrics & Reporting

  • Define, track, and report on key detection engineering metrics including coverage, detection quality, false positive rates, mean time to detect (MTTD), and backlog
  • health
  • Provide regular program updates to CSOC leadership and stakeholders on team performance, program health, and strategic initiatives
  • Maintain visibility into detection gaps and remediation progress, driving accountability to measurable outcomes
  • Contribute to board and executive-level reporting on detection capability maturity as needed

Cross-Functional Partnership

  • Partner closely with Threat Hunting, Adversary Emulation, Cyber Threat Intelligence, and Incident Management teams to ensure detection content reflects real-world threats and operational feedback
  • Represent the detection engineering team in Red Team and Purple Team exercises, translating exercise outcomes into actionable detection improvements
  • Collaborate with platform and infrastructure teams to ensure detection tooling is properly maintained, scaled, and integrated


Qualifications

  • Bachelor's degree in Cybersecurity, Information Technology, or a related field preferred
  • 7+ years of experience in security operations, detection engineering, threat hunting, incident response, or a closely related discipline
  • People management or formal team leadership experience in a security engineering context
  • Hands-on experience writing and tuning detections in one or more SIEM platforms
  • Hands-on background with SOAR or security automation platforms
  • Experience with endpoint detection and response (EDR) and/or asset visibility and control platforms
  • Strong familiarity and working knowledge of MITRE ATT&CK, Cyber Kill Chain, or similar frameworks and their application to detection strategy
  • Familiarity with detection-as-code concepts, including version control, code review workflows, and CI/CD pipelines
  • Demonstrated ability to define team roadmaps, manage priorities, and deliver programs against measurable goals
  • Expert-level understanding of the threat landscape including adversary tools such as C2 frameworks, RMMs, credential theft utilities, proxy and tunneling tools, cloud attack tooling, data exfiltration utilities, malware loaders, ransomware, and post-exploitation frameworks, and the TTPs associated with their use
  • Strong communication skills with the ability to translate technical concepts for both engineering audiences and senior leadership
  • Experience building or scaling a detection engineering program or practice from the ground up

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission-we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Apply