AI-Powered Cloud Security Engineer — Detections & IR

Beyond Finance; Chicago (IL); Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

Health, dental, vision coverage

Generous PTO and holidays

Parental leave

401(k) matching

Career development & training

Job summary

Beyond Finance is seeking a security operations professional to join our growing team in the United States. You’ll own detection engineering for Cloud SIEM and Datadog integrations, automate alerts, and drive incident response with AI-assisted triage in a fast-paced environment.

You’ll partner with cross‑functional teams to reduce noise, improve coverage, and cut costs while ensuring robust security across SaaS and cloud workloads. Remote-friendly, with on‑call rotation.

Qualifications

• 3+ years in security operations, detection engineering, or security engineering.
• Proficient in scripting and in detecting logic as code; IaC and CI/CD experience is a plus.
• Deep hands-on Datadog experience, especially Cloud SIEM detection rules and log pipelines.
• Experience with automation orchestration tooling.

Responsibilities

• Write, tune, and retire Cloud SIEM detections mapped to MITRE ATT&CK.
• Onboard sources and build Datadog log pipelines that parse, normalize, and enrich security telemetry.
• Manage detections in version control with testing and peer review.
• Build workflows for alert enrichment, triage, containment, and notification.
• AI-assisted triage and alert summarization with a human in the loop.
• Track coverage, false positives, automation rate.
• Manage indexes, exclusion filters, and retention tiers to cut noise and cost without losing coverage.
• Support triage, investigations, and incident response, including on-call.

Skills

Datadog

Automation scripting

MITRE ATT&CK

CI/CD

Threat hunting

Tools

Datadog Cloud SIEM

Job description

Beyond Finance is seeking a security operations professional to join our growing team in the United States. You’ll own detection engineering for Cloud SIEM and Datadog integrations, automate alerts, and drive incident response with AI-assisted triage in a fast-paced environment.

You’ll partner with cross‑functional teams to reduce noise, improve coverage, and cut costs while ensuring robust security across SaaS and cloud workloads. Remote-friendly, with on‑call rotation.