Carlyle

Engineer

• Own the detection content lifecycle from requirements and design through testing, deployment, tuning, and retirement
• Develop high-fidelity detections across endpoint, identity, email, network, cloud, and business-critical application telemetry
• Translate adversary behaviors, threat intelligence, incident learnings, and control gaps into production-ready analytics
• Coordinate targeted threat hunts with incident response and security partners
• Review technical work, establish reusable standards, and coach contributors
• Manage intelligence requirements and produce strategic, operational, and tactical intelligence assessments and briefings
• Turn intelligence into prioritized detection, hunting, hardening, and response requirements
• Govern indicator and intelligence-data lifecycles and maintain information-sharing relationships
• Coordinate monitoring for dark-web activity, lookalike domains, social-media threats, impersonation, exposed information, and other digital risks
• Support executive protection with cyber and digital-risk intelligence
• Work with Legal, Communications, service providers, and business stakeholders on assessments, escalations, and takedowns
• Use AI-assisted and analytical tools to develop, translate, test, and document detection rules
• Build and maintain automation playbooks for alert enrichment, evidence correlation, investigation summaries, prioritization, routing, and recommendations
• Develop scripts, integrations, and data transformations connecting detection, intelligence, case-management, and response workflows
• Pilot workflow changes, train affected analysts, and measure adoption, investigation time, quality, and rework
• Improve telemetry coverage, data quality, integration reliability, scalability, and cost effectiveness
• Translate the Threat Detection and Intelligence strategy into an actionable roadmap and prioritized backlog
• Build partnerships across incident response, vulnerability management, engineering, infrastructure, cloud, identity, and Communications
• Define operating handoffs, ownership boundaries, and escalation paths
• Present metrics, risks, recommendations, and progress updates to technical and non-technical audiences
• Monitor service-provider performance and resolve delivery, handoff, and escalation issues

Manager, Threat Detection Engineer