Forward-Deployed Data Engineer, SIEM/SOAR Content/Playbooks

Right Fit Advisors; Kansas City (MO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

AI-driven security tech exposure

Greenfield security project

Job summary

Right Fit Advisors invites a Forward Deployed Data Engineer - SIEM/SOAR to power MDR delivery. You will craft detection rules, parsers, SOAR playbooks, dashboards, and API integrations, enabling intelligent security operations.

You will train customers on detection content and platform capabilities, work with Deployment Engineers for go-lives, and document tuning notes to sustain scalable security outcomes.

Qualifications

• 3+ years in detection engineering, content engineering, or security operations.
• Proficiency in SIEM rule development (YARA-L, KQL) and SOAR playbooks.
• Experience with Python, Cloud Run functions, REST APIs, and dashboards.

Responsibilities

• Author, tune, and maintain detection content across Google SecOps and MS Sentinel.
• Build log parsers for new data sources and maintain SOAR playbooks.
• Develop dashboards and API integrations for common alert types and use cases.
• Collaborate with Deployment Engineers for new go-lives and coverage gaps.
• Train customers on detection content, dashboards, and platform capabilities.
• Document content with metadata, use cases, and tuning notes.
• Support AI-assisted content workflows with human review as the gate.

Skills

Detection engineering

SOAR automation

Python development

REST API integration

Dashboards development

Threat intelligence

Education

Bachelor's degree in CS or related

Tools

YARA-L

KQL

Cloud Run

Job description

Right Fit Advisors invites a Forward Deployed Data Engineer - SIEM/SOAR to power MDR delivery. You will craft detection rules, parsers, SOAR playbooks, dashboards, and API integrations, enabling intelligent security operations.

You will train customers on detection content and platform capabilities, work with Deployment Engineers for go-lives, and document tuning notes to sustain scalable security outcomes.