150K–200K USD / year
Sr. Security Engineer (Detection)
OtherRemote — United States
Published on 2026-09-17
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Own and build Solace’s security detection and alerting program, turning telemetry from identity, cloud, endpoint, and SaaS systems into high-signal detections. The role also covers incident response, security automation, and general security engineering in a HIPAA-regulated environment.
About the company
Solace Health pairs patients with expert healthcare advocates and tools that help them navigate insurance, care decisions, and the complexity of the U.S. healthcare system.
The team
Security & IT; reports to the Staff Security Engineer.
Stack
Datadog Cloud SIEMOktaGoogle WorkspaceAWSGCPJamfSnowflakeGitHub
What you'll do
- Own Datadog SIEM pipelines, parsing, enrichment, retention, and cost management
- Build and tune detections across identity, cloud, endpoint, data, and SaaS systems
- Reduce alert noise and measure detection quality
- Map detection coverage to MITRE ATT&CK and prioritize gaps
- Version-control, test, document, and peer-review detections
- Triage, investigate, contain, and document incidents; improve response playbooks
- Automate incident triage and response workflows
- Support cloud hardening, IAM improvements, and HIPAA/SOC 2 audit evidence gathering
What we're looking for
- 3–6 years in security operations, detection engineering, incident response, or a similar hands-on role
- Experience building and tuning SIEM detections; Datadog Cloud SIEM preferred
- Ability to analyze cloud, identity-provider, and SaaS logs
- Hands-on incident response experience, including post-incident reviews
- Python or similar scripting skills
- Understanding of phishing, credential compromise, SSO abuse, cloud misconfigurations, and supply-chain risks
- Comfort with ambiguity, ownership, and small-team environments
- Must be based in the United States
Nice to have
- Healthcare or other regulated-environment experience, including HIPAA, SOC 2, or HITRUST
- Detection-as-code workflows or CI/CD for detections
- SOAR or workflow automation experience
- Security operations familiarity with Okta, Jamf, Snowflake, GitHub, or Vanta
- Threat hunting or contributions to open-source detection content
Benefits
- Equity