Cybersecurity Threat Engineer - Remote

Job Overview

This Cybersecurity Engineer – Threat Engineer is responsible for supporting the creation, tuning, and optimization of security detections that enable timely identification of potential threats. Under the mentorship of senior engineers, the role assists with alert analysis, threat research, detection validation, and security monitoring activities. The position contributes to improving detection quality, reducing false positives, identifying visibility gaps, and enhancing security operations through the development and maintenance of SOAR playbooks and automated response workflows. This role provides an opportunity to develop hands-on experience with SIEM and SOAR platforms, threat intelligence, and detection engineering principles while helping defend against evolving cyber threats.

The role functions as part of the Cybersecurity Engineering team and collaborates cross-functionally with Threat Intelligence, Threat Emulation, GRC, Cybersecurity Architecture and Incident Response teams to help secure and defend against existing and emerging threats to the organization. The role is expected to execute assigned activities with direction, document findings clearly, communicate technical details to team members and business partners, escalate issues appropriately, and develop technical depth through hands-on participation in threat operations.

Job Responsibilities

Detection Engineering

• Develop, tune, and maintain threat detection use cases, correlation rules, and analytics across SIEM, EDR, and cloud security platforms
• Perform detection validation, gap analysis, and continuous optimization to improve detection coverage, reduce false positives, and enhance security monitoring effectiveness
• Partner with internal Threat Intelligence team to research emerging threats, adversary tactics, techniques, and procedures (TTPs), and translate intelligence into actionable detections aligned with the MITRE ATT&CK framework
• Participate in purp