Senior Security Engineer, Detection

🕒 il y a 13 jours

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Solace

Site WebLinkedInTous les Emplois

1 - 10 employés

🏥 Santé

💼 Conseil

🛡️ Assurance

Healthcare • Consulting • Insurance

Solace est une entreprise de plaidoyer en santé qui connecte les patients et leurs familles avec des défenseurs qualifiés, tels que des médecins, des infirmiers et d'autres experts de la santé. Leur mission est de responsabiliser les patients et d'améliorer les résultats de santé en aidant à naviguer dans le système de santé complexe. Solace offre un soutien dans des domaines comme la planification des rendez-vous, la communication avec les équipes médicales et les démarches administratives liées aux assurances, et les défenseurs sont couverts par les plans Medicare et Medicare Advantage. La plateforme garantit que les patients reçoivent un soutien personnalisé par le biais de consultations téléphoniques ou vidéo, en les aidant dans des domaines allant de la gestion des maladies chroniques à la paperasse administrative.

Description

• Own our Datadog Cloud SIEM: log pipelines, parsing, enrichment, retention, and cost management • Build, tune, and maintain detection rules across our environment — identity (Okta, Google Workspace), cloud (AWS, GCP), endpoint (Jamf), data platforms (Snowflake), and SaaS audit logs (GitHub, Slack, and more) • Systematically reduce alert noise and drive alert quality metrics (fidelity, time-to-triage, false-positive rates) • Map detection coverage against real-world threats (MITRE ATT&CK) and close the highest-risk gaps first • Treat detections as code: version-controlled, tested, documented, and peer-reviewed • Ensure logging and audit trails meet HIPAA requirements for ePHI systems • Serve as a primary responder for security alerts and incidents: triage, investigate, contain, and document • Improve and extend our incident response playbooks, and run post-incident reviews that produce real fixes • Build automation to speed up triage and response (enrichment, auto-containment, workflow automation) • Participate in and help mature our on-call rotation as the team grows • Contribute to cloud and infrastructure security hardening across AWS and GCP • Support identity and access management improvements (Okta policies, access reviews, least privilege) • Pitch in on vendor security reviews, security questionnaires, and audit evidence gathering (HIPAA, SOC 2) • Help build a security-first culture through documentation, tooling, and partnership with engineering teams

🎯 Exigences

• 3–6 years in security operations, detection engineering, incident response, or similar hands-on security roles • Real experience building and tuning detections in a SIEM — Datadog Cloud SIEM strongly preferred, but deep experience with Splunk, Elastic, Chronicle, Sentinel, or Panther translates well • Fluency reading and correlating logs from cloud providers (CloudTrail, GCP audit logs), identity providers, and SaaS platforms • Hands-on incident response experience: you've triaged real alerts, worked real incidents, and written the post-mortems • Scripting ability (Python or similar) for automation, log analysis, and detection tooling • Strong understanding of common attack patterns — phishing, credential compromise, SSO abuse, cloud misconfigurations, supply chain risks • Comfortable with ambiguity and building from scratch; startup or small-team experience is a strong signal • Experience in healthcare or other regulated environments (HIPAA, SOC 2, HITRUST) (Nice to Have) • Detection-as-code workflows (Terraform, CI/CD for detections) (Nice to Have) • SOAR or workflow automation experience (Tines, Windmill, custom tooling) (Nice to Have) • Familiarity with Okta, Jamf, Snowflake, GitHub, or Vanta from a security operations perspective (Nice to Have) • Threat hunting experience or contributions to open-source detection content (Nice to Have)

🏖️ Avantages

• Applicants must be based in the United States.