Senior Security Engineer – Elastic SIEM, Detection Engineering

🔥 3 minutes ago

🦞 Maine, New York, +3 more states – Remote

🦞 Maine – Remote 🗽 New York – Remote 🌲 North Carolina – Remote 🍂 Massachusetts – Remote 🌴 South Carolina – Remote

💵 $123k - $180k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Acronis

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2003

🔒 Cybersecurity

☁️ SaaS

🤝 B2B

Cybersecurity • SaaS • B2B

Acronis is a cyber protection company that provides integrated backup, disaster recovery, and cybersecurity solutions delivered as cloud-native and on-premises software. It offers endpoint protection (EDR/XDR), anti-malware, email and Microsoft 365 protection, RMM and PSA tools, and MSP-focused multi-tenant management to enable service providers and businesses to detect, respond, and recover from cyberthreats. Acronis operates globally with compliant data centers, certifications, and a platform designed to consolidate backup, security, and IT management into a single solution.

📋 Description

• Own and optimize the Elastic Security platform (Elasticsearch, Kibana, Fleet, Logstash, Elastic Agents) • Design and maintain ingestion pipelines for cloud, endpoint, network, and application telemetry • Improve telemetry quality, data retention, performance, and investigation workflows • Integrate SIEM workflows with SOAR and automation tooling • Build and maintain a Detection-as-Code pipeline using Git-based workflows and CI/CD automation • Develop, test, tune, and maintain high-fidelity detections using Elastic Security, EQL, and KQL • Reduce alert noise through tuning, enrichment, suppression, and exception handling • Map detections to MITRE ATT&CK and drive detection coverage strategy • Assist with complex alert escalations and perform initial incident scoping • Translate incident learnings into improved detections and telemetry coverage • Partner with other teams to improve logging and visibility

🎯 Requirements

• 5+ years of cybersecurity engineering experience • 3+ years focused on SIEM engineering, detection engineering, or security analytics • Strong hands-on experience with Elastic Security and the Elastic Stack • Experience building or maintaining Detection-as-Code workflows using Git and CI/CD pipelines • Strong understanding of detection tuning, alert fidelity, and operational detection quality • Ability to independently investigate complex alerts and produce actionable findings

🏖️ Benefits

• Medical, dental, and vision coverage • Flexible spending accounts (FSA) • Disability and life insurance • 401(k) retirement plan with company match • Generous vacation policy