Organization:

VEC TDR

Job Summary:

The Senior Threat Management Engineer focuses on engineering and automation, ensuring scalable, effective, and resilient detection capabilities independently. This role will develop detection content, improve response workflows, and drive innovation across multiple security platforms.

Note: This is a remote hybrid role, but we do prefer local candidates, here in the Middle Tennessee area, for this position.

.

KEY RESPONSIBILITIES

• Security Visibility Fabric (SVF) Ownership: Architect, document, and maintain the SVF and its supporting infrastructure, including threat intelligence integrations.

• Detection Engineering Coordination: Lead and support detection development across platforms such as SIEM, SOAR, Threat Intel Management, NGFWs, EDR, and CNAPP.

• Alert Triage Enablement: Collaborate with alert triage (AT) analysts to design and implement processes and tooling that support efficient alert triage using SVF data.

• AT Collaboration & Rotation: Participate in periodic “spot AT” rotations to maintain operational awareness and support short-term detection engineering tasks.

• Response Capability Rollout: Develop and deploy new response automation and capabilities; train AT analysts on usage and workflows.

• SVF Health Monitoring & Maintenance: Conduct regular health checks, troubleshoot ingestion issues, and ensure telemetry fidelity across platforms.

• Purple Teaming Support: Remediate detection gaps identified during Purple Team exercises and validate fixes in collaboration with AT and Red Team functions.

• Malware Analysis Enablement: Contribute to the development of internal malware analysis capabilities and provide training to team members.

• Detection Lifecycle Management: Establish governance for detection content including versioning, testing, deployment, and retirement.

• Metrics & Reporting: Define and track KPIs for detection efficacy, false positive rates, coverage, and response performance.

• Threat Intelligence Integration: Operationalize threat intelligence feeds into detection logic and response workflows.

• Tooling Evaluation & Innovation: Lead proof-of-concept efforts and recommend new technologies to enhance SVF and detection capabilities.

• Knowledge Sharing & Enablement: Maintain internal documentation, runbooks, and host training sessions for engineering and analyst teams.

• Compliance & Audit Support: Ensure SVF and detection logic align with regulatory requirements (e.g., HIPAA) and support audit readiness.

TECHNICAL CAPABILITIES

• Strong experience with SIEM and SOAR platforms.

• Familiarity with endpoint detection platforms.

• Proficiency in detection engineering, including rule development, enrichment logic, and tuning.

• Experience with threat intelligence platforms and operationalizing CTI into detections.

• Experience with malware analysis techniques and sandboxing workflows.

• Scripting and automation skills (e.g., Python, PowerShell, JSON/YAML for playbooks).

• Understanding of log ingestion pipelines, telemetry health, and observability tooling.

• Familiarity with MITRE ATT&CK framework and threat modeling.

• Experience supporting Purple Team or Red Team exercises.

• Ability to work in regulated environments (e.g., HIPAA) with attention to compliance and audit requirements.

• Strong documentation and communication skills for cross-functional collaboration and enablement.

About the Department:

VUMC Enterprise Cybersecurity (VEC)

VUMC Enterprise Cybersecurity focuses on protecting Vanderbilt Health from the numerous cyberthreats that exist in today’s world. They work to identify and mitigate risks, create proactive solutions to manage these risks, and develop a strong culture of safety and security within the organization.

Our professional administrative functions include critical supporting roles in information technology and informatics, finance, administration, legal and community affairs, human resources, communications and marketing, development, facilities, and many more.

At our growing health system, we support each other and encourage excellence among all who are part of our workforce. High-achieving employees stay at Vanderbilt Health for professional growth, appreciation of benefits, and a sense of community and purpose.

Core Accountabilities:

Organizational Impact: Independently delivers on objectives with understanding of how they impact the results of own area/team and other related teams. Problem Solving/ Complexity of work: Utilizes multiple sources of data to analyze and resolve complex problems; may take a new perspective on existing solution. Breadth of Knowledge: Has advanced knowledge within a professional area and basic knowledge across related areas. Team Interaction: Acts as a "go-to" resource for colleagues with less experience; may lead small project teams.

Core Capabilities :

Supporting Colleagues: - Develops Self and Others: Invests time, energy, and enthusiasm in developing self/others to help improve performance e and gain knowledge in new areas. - Builds and Maintains Relationships: Maintains regular contact with key colleagues and stakeholders using formal and informal opportunities to expand and strengthen relationships. - Communicates Effectively: Recognizes group interactions and modifies one's own communication style to suit different situations and audiences. Delivering Excellent Services: - Serves Others with Compassion: Seeks to understand current and future needs of relevant stakeholders and customizes services to better address them. - Solves Complex Problems: Approaches problems from different angles; Identifies new possibilities to interpret opportunities and develop concrete solutions. - Offers Meaningful Advice and Support: Provides ongoing support and coaching in a constructive manner to increase employees' effectiveness. Ensuring High Quality: - Performs Excellent Work: Engages regularly in formal and informal dialogue about quality; directly addresses quality issues promptly. - Ensures Continuous Improvement: Applies various learning experiences by looking beyond symptoms to uncover underlying causes of problems and identifies ways to resolve them. - Fulfills Safety and Regulatory Requirements: Understands all aspects of providing a safe environment and performs routine safety checks to prevent safety hazards from occurring. Managing Resources Effectively: - Demonstrates Accountability: Demonstrates a sense of ownership, focusing on and driving critical issues to closure. - Stewards Organizational Resources: Applies understanding of the departmental work to effectively manage resources for a department/area. - Makes Data Driven Decisions: Demonstrates strong understanding of the information or data to identify and elevate opportunities. Fostering Innovation: - Generates New Ideas: Proactively identifies new ideas/opportunities from multiple sources or methods to improve processes beyond conventional approaches. - Applies Technology: Demonstrates an enthusiasm for learning new technologies, tools, and procedures to address short-term challenges. - Adapts to Change: Views difficult situations and/or problems as opportunities for improvement; actively embraces change instead of emphasizing negative elements.

Position Qualifications:

Responsibilities:

Certifications:

Work Experience:

Relevant Work Experience

Experience Level:

5 years

Education:

Bachelor's

This role offers the opportunity to make a meaningful impact within Vanderbilt Health, supported by a comprehensive benefits package which may include health, disability, retirement and/or wellness offerings to enhance your well-being and professional growth.