Detection Rules Engineer Jobs

1 job found

Today

Associate Cybersecurity Systems Engineering Analyst - Data Protection

Duke Energy Charlotte, NC

Charlotte, NC

Today

Full time Cybersecurity Tools Data Security Detection Rules

Apply Now

Job Description

The Cybersecurity Systems Engineering Analyst supports Duke Energy’s cyber security operations by assisting in the development and maintenance of tools used to generate security events and incidents across the enterprise. This role operates within a 24x7 CSOC environment and emphasizes detection and correlation for managed systems while following processes set by Cybersecurity leadership and CIRT.

Role Responsibilities

Participate in content generation and ongoing operations for a Global Security Information and Event Management (SIEM) system, including ESM, Oracle, Connector appliances, SmartConnectors, Logger appliances, Windows and Linux servers, and network and security related devices.
Perform functional testing to maintain operability of the cybersecurity tool suite, coordinating with the cyber defense team to manage and administer updates to rules and signatures for specialized cyber defense applications.
Identify, develop, and deploy SIEM content and events within an evolving SIEM infrastructure, including work with Dashboards, Active Channels, Reports, Rules, Filters, Trends, Metrics, and Active Lists.
Use knowledge of ongoing and emerging cyber threats related to network and endpoint vulnerabilities to define criteria for event and alert generation and correlation.
Track cyber threat actors and campaigns using technical analysis and open source or third-party intelligence.
Research and track new exploits and cyber threats to support continuous improvement of detection content.
Support the establishment, enhancement, and continual improvement of integrated correlation rules, alerts, searches, reports, and responses for supported cybersecurity tool suites.
Assist with maintenance (patching and upgrades), configuration, and operation of cybersecurity tools, including Endpoint / Antivirus, SIEM loggers and connectors, and network analysis and defense products.
Enhance and tune product events and correlation rules to reduce false positives, and ensure deployment of the supported product set across the threat surface.
Provide 24x7 Systems Engineer escalations on a rotating shift basis.

Required Qualifications

High School/GED
Minimum 2 years of related work experience

Preferred Qualifications

Associates: 0 years work experience preferred
Bachelors: 0 years work experience preferred

Technologies

Global Security Information and Event Management (SIEM)
ESM
Oracle
Connector appliances
SmartConnectors
Logger appliances
Windows and Linux
Endpoint / Antivirus
SIEM loggers and connectors
Windows and Linux command line scripting
NIST Cybersecurity Framework

Location and Work Model

Charlotte, NC (hybrid)

Work will be performed from both remote and onsite locations after onboarding.
Hybrid employees must live within a reasonable commute to the designated Duke Energy facility, not greater than 50 miles one way.
Employees are expected to report to the assigned Duke Energy facility as required and directed by their manager, on average 3 full workdays per regular workweek.
Office Environment

Travel, Relocation, and Sponsorship

Travel requirements: Not required
Relocation assistance provided: No
Represented/union position: No
Visa sponsored position: No. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Application Deadline

Please submit your application by 11:59 PM on Saturday, September 19, 2026.

View full job page →

Get Detection Rules Engineer Jobs alerts

New Detection Rules Engineer Jobs, daily.