AI-Driven SIEM & SOAR Data Engineer (Forward Deployed)

TENEX.AI; Kansas City (MO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary and benefits

Job summary

TENEX.AI seeks a Forward Deployed Data Engineer — SIEM/SOAR to craft detection rules, parsers, and SOAR playbooks that power our MDR platform. You will also train customers and help them understand the deployed content and dashboards.

You will build integrations, tune MITRE ATT&CK-aligned detections, and contribute to content delivery across Google SecOps and Microsoft Sentinel in a fast-paced startup. This is an in-person role with a collaborative partner-driven environment.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• Relevant certifications such as CISSP, CISM, GIAC certifications, Google Cloud Professional, Microsoft SC-200/AZ-500, or AWS Certified Solutions Architect are a plus.

Responsibilities

• Author, tune, and maintain detection rules, correlation logic, and threat content across Google SecOps and Microsoft Sentinel.
• Build and validate log parsers for new data sources integrated into customer environments.
• Develop and maintain SOAR playbooks, automation workflows, and dashboards for common alert types and operational use cases.
• Build cloud run functions, scripts, and API integrations where native connectors or content do not exist.
• Collaborate with Deployment Engineers to ensure content is ready for new customer go-lives.
• Monitor detection coverage gaps and proactively develop content to address them.
• Incorporate threat intelligence and adversary TTPs (MITRE ATT&CK) into detection logic.
• Serve as an advanced enablement resource for customers — training them on detection content, dashboards, and platform capabilities at a deeper technical level.
• Document all content with clear metadata, use cases, and tuning notes.
• Support AI-assisted content generation workflows with human review as the quality gate.

Skills

Detection engineering

SIEM rule development

SOAR playbooks

Log parser development

MITRE ATT&CK framework

Python

REST API integrations

Security dashboards

Threat intelligence

Customer enablement

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Relevant certifications (CISSP, CISM, GIAC, etc.)

Tools

YARA-L (Google SecOps)

KQL (Microsoft Sentinel)

REST APIs

Job description

TENEX.AI seeks a Forward Deployed Data Engineer — SIEM/SOAR to craft detection rules, parsers, and SOAR playbooks that power our MDR platform. You will also train customers and help them understand the deployed content and dashboards.

You will build integrations, tune MITRE ATT&CK-aligned detections, and contribute to content delivery across Google SecOps and Microsoft Sentinel in a fast-paced startup. This is an in-person role with a collaborative partner-driven environment.