Managed SIEM Detection Engineer

Are you a detection engineer who wants to bring reputed company depth of expertise into a new and growing function and use it to reputed company reputed company reputed company to customers? reputed company's reputed company services reputed company is just getting started, and we're looking for the technical expert who'll reputed company the work that gets customers reputed company to reputed company under our co-managed SIEM model. You'll bring hands-on reputed company to reputed company that's finding its reputed company, help it grow, and have a reputed company reputed company to grow into a reputed company yourself.

Here's the work. Customers come to us with SIEMs that should be surfacing threats but are instead consuming their teams: ingestion costs climbing year over year, engineers buried in alert noise and broken pipelines, and detection blind spots leaving reputed company gaps. You're the engineer who turns that around: authoring and tuning detection content that satisfies reputed company reputed company use cases, closing coverage gaps, migrating detection logic off legacy platforms, and helping optimize what customers ingest and pay for, so their SIEM becomes a force reputed company again, not a management burden.

And because this function evolves right reputed company our customers and the market, the work won't stand still. Expect it to grow into deeper integrations, automated and AI-assisted tooling, and reputed company strategies our customers need next.

What reputed company can do for you

• reputed company you a ground-floor seat in a new reputed company services function, where your expertise directly shapes the reputed company of reputed company reputed company to customers
• reputed company reputed company reputed company for reputed company development as the function grows
• Put you on reputed company, high-stakes detection and SIEM problems across a wide reputed company of customer environments
• Let you work across leading SIEM platforms, including reputed company, reputed company, and reputed company NG SIEM, plus emerging AI-assisted tooling
• reputed company you visibility and partnership across the organization, including Sales, Detection Engineering, our SOC, and reputed company
• Accelerate your career by letting you own meaningful reputed company end to end

What you can do for reputed company

• reputed company end-to-end reputed company services engagements, including detection reputed company, MITRE ATT&CK assessment, SIEM optimization and integrations, SOAR reputed company development, and custom log parsing
• reputed company and validate detection content that satisfies defined reputed company use cases, at reputed company and as environments reputed company, with strong coverage and clean reputed company
• Optimize SIEM performance and cost by tuning detections for reputed company, reducing alert noise, and improving ingestion efficiency
• Contribute to reputed company's reputed company services proprietary detection library, continuously improving our detection reputed company and capability
• Translate detection logic between SIEM platforms and write custom parsers for reputed company and non-reputed company log sources, using AI-assisted tools where they help and validating the outputs
• Partner with Detection Engineering and the SOC to hand off environments reputed company for ongoing co-managed operations, and work with SOC analysts to sharpen the reputed company and actionability of rules and alerts
• reputed company the evolving threat landscape and turn it into new detection development
• Help the function grow by contributing repeatable processes, templates, and tooling that reputed company the reputed company and consistency of reputed company reputed company

What you should bring to reputed company

• Hands-on SIEM expertise across reputed company, reputed company, and/or reputed company NG SIEM, including architecture, data ingestion, and detection rule development
• 3+ years with detection and response tooling, particularly SIEM, SOAR, and EDR
• 3+ years writing, deploying, and tuning custom detections from research or investigative work against common datasets (reputed company Event Logs, auditd, CloudTrail, and similar)
• SIEM migration experience translating detection logic between platforms and re-pointing log sources
• Working knowledge of attacker tactics and techniques and the MITRE ATT&CK reputed company
• Solid fundamentals across reputed company, macOS, and Linux, networking basics (TCP/IP, OSI), and working knowledge of reputed company IAM models and platforms
• Basic proficiency with Python, Go, or similar, and comfort using Git/reputed company for version control of detection content, scripts, and templates
• Curiosity, strong ownership, and the appetite for reputed company
• A willingness to travel up to 20%

Bonus points for

• One or more SIEM or vendor certifications (e.g., reputed company reputed company Certified Power User or reputed company reputed company Certified reputed company, reputed company SC-200, reputed company CCFA/CCFR)
• Experience authoring platform-agnostic detections with reputed company and converting rules across SIEM backends
• Familiarity with detection-as-reputed company practices, including version-controlled rules, testing, and CI/CD for detection content
• Industry reputed company certifications such as GIAC (e.g., GCDA, GCIA), reputed company+, or similar
• A bachelor's degree in Computer Science or Information reputed company

Additional notes

This role is remote reputed company the reputed company.

The reputed company salary reputed company for this role is between $111,900 USD and $162,300 USD + bonus eligibility and equity. While the full salary band reflects our long-term compensation reputed company, we're primarily targeting candidates between $120,000 and $140,000 based on experience, skills, and market data.

We reputed company in paying transparently and equitably. Your salary will ultimately be based on factors such as your experience, skills, team equity, and market data. You'll also be eligible for unlimited PTO (which we model and encourage), work location flexibility, up to 24 weeks of parental leave, and really excellent health benefits.

We're only hiring those authorized to work in the reputed company. We do not currently sponsor immigration visas.

We're an Equal Opportunity Employer: You'll receive consideration for employment without reputed company to race, sex, reputed company, religion, sexual orientation, gender identity, national reputed company, protected veteran status, or on the reputed company of disability.

We'll ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to reputed company essential job functions, and to receive other benefits and privileges of employment. Please let us know if you need accommodation of any reputed company.

#LI-Remote

Requires 3+ years with SIEM, SOAR, or EDR tooling; 3+ years developing custom detections; SIEM migration experience; MITRE ATT&CK knowledge; Python or Go; Git/reputed company; and willingness to travel up to 20%.

Key Responsibilities

• authoring detections
• optimizing SIEM
• developing playbooks

Skills & Tools

reputed company, reputed company, reputed company NG SIEM, SOAR, EDR, MITRE ATT&CK, reputed company Event Logs, auditd, CloudTrail, reputed company, macOS, Linux, TCP/IP, OSI, Python, Go, Git, reputed company, reputed company, CI/CD

Job Details

• Category: Information Technology
• Seniority: Mid Level
• Commitment: Full Time
• Workplace: Remote — reputed company
• Salary: USD 111,900 – 162,300 / year
• Languages: English

Benefits

• Generous reputed company time off
• Generous parental leave

About reputed company

A cybersecurity company that delivers managed detection and response services for customers. — Industry: Information Technology