S
Solace
Senior Security Engineer (Detection)
Skills
Google Cloud PlatformPythonSnowflakeDatadogSplunkCybersecurityAWSGitHubNo-code AutomationsSupply ChainTerraform
1 month ago
Share this opportunity
Share this opportunity to other talents of your network:
✓ Offer them a visibility boost with clients.
✓ Help your contacts find their next job.
Important information
Contract type:
Permanent
Location:
United States
Work mode:
Onsite
Published on:
19 September 2026
What they need
- We’re looking for a Sr. Security Engineer to join our growing security team at Solace. You’ll be a generalist at heart, but your first and most important mission is clear: own our detection and alerting program end to end
- We have the raw materials in place — a Datadog SIEM with logs flowing in from across our identity, cloud, endpoint, and SaaS stack — but we need someone who can turn that telemetry into a high-signal detection program. You’ll decide what we detect, write and tune the rules, kill the noise, and make sure that when something real happens, we know fast and respond well
- This is a hands-on, high-ownership role on a small team in a HIPAA-regulated environment. You’ll report to our Staff Security Engineer and work alongside engineers focused on application and infrastructure security. What you build here will be the foundation of security operations at Solace for years
- Detection Engineering & SIEM Ownership (Primary Focus)
- Own our Datadog Cloud SIEM: log pipelines, parsing, enrichment, retention, and cost management
- Build, tune, and maintain detection rules across our environment — identity (Okta, Google Workspace), cloud (AWS, GCP), endpoint (Jamf), data platforms (Snowflake), and SaaS audit logs (GitHub, Slack, and more)
- Systematically reduce alert noise and drive alert quality metrics (fidelity, time-to-triage, false-positive rates)
- Map detection coverage against real-world threats (MITRE ATT&CK) and close the highest-risk gaps first
- Treat detections as code: version-controlled, tested, documented, and peer-reviewed
- Ensure logging and audit trails meet HIPAA requirements for ePHI systems
- Incident Response
- Serve as a primary responder for security alerts and incidents: triage, investigate, contain, and document
- Improve and extend our incident response playbooks, and run post-incident reviews that produce real fixes
- Build automation to speed up triage and response (enrichment, auto-containment, workflow automation)
- Participate in and help mature our on-call rotation as the team grows
- Generalist Security Engineering
- Contribute to cloud and infrastructure security hardening across AWS and GCP
- Support identity and access management improvements (Okta policies, access reviews, least privilege)
- Pitch in on vendor security reviews, security questionnaires, and audit evidence gathering (HIPAA, SOC 2)
- Help build a security-first culture through documentation, tooling, and partnership with engineering teams- Strong understanding of common attack patterns — phishing, credential compromise, SSO abuse, cloud misconfigurations, supply chain risks
- Fluency reading and correlating logs from cloud providers (CloudTrail, GCP audit logs), identity providers, and SaaS platforms
- Real experience building and tuning detections in a SIEM — Datadog Cloud SIEM strongly preferred, but deep experience with Splunk, Elastic, Chronicle, Sentinel, or Panther translates well
- Hands-on incident response experience: you’ve triaged real alerts, worked real incidents, and written the post-mortems
- 3–6 years in security operations, detection engineering, incident response, or similar hands-on security roles
- Scripting ability (Python or similar) for automation, log analysis, and detection tooling
- Comfortable with ambiguity and building from scratch; startup or small-team experience is a strong signal
- Experience in healthcare or other regulated environments (HIPAA, SOC 2, HITRUST)
- Detection-as-code workflows (Terraform, CI/CD for detections)
- SOAR or workflow automation experience (Tines, Windmill, custom tooling)
- Familiarity with Okta, Jamf, Snowflake, GitHub, or Vanta from a security operations perspective
- Threat hunting experience or contributions to open-source detection content
Other offers great for you!
These companies are also looking for great profiles
V
Visian
Ingénieur Sécurité Poste de Travail / Endpoint Security Engineer (H/F)
650
Freelance
Paris, France
Hybrid
Skills
CybersecurityIntuneendpointendpoint securitymicrosoft defender
17 days ago
Quick apply
V
Visian
Ingénieur Sécurité PKI et Automatisation
Freelance
Paris, France
Hybrid
Skills
PKICryptographyStrong authenticationSmart cardsAutomationLevel 3 support
5 days ago
Quick apply
E
Espace Freelance
Ingénieur Sécurité Firewall
Freelance
Paris, France
Hybrid
Skills
FirewallPalo AltoFortinetVMware NSXNetwork troubleshootingSecurity policy filtering
1 day ago
Quick apply
No company information available.