Remote Security Analytics Engineer - AI-Driven Telemetry

VulnU; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Paid parental leave

Flexible PTO

Equity

Home-office stipend

Job summary

Backblaze is seeking a Security Analytics Engineer to design, operate, and continually improve its security telemetry, analytics, detection engineering, and observability capabilities in a fully remote team. You will help extend SIEM and apply AI-assisted correlation to protect data across endpoints, clouds, and applications.

This role requires hands‑on experience with large‑scale telemetry, event normalization, dashboards, and alerting, plus scripting and IaC skills to automate workflows with

Qualifications

• Experience engineering large-scale security telemetry systems.
• Knowledge of logging, event correlation, normalization, enrichment, and security data pipelines.
• Scripting or software development with APIs and IaC.
• Experience with cloud environments and distributed architectures.

Responsibilities

• Design and operate scalable security analytics platforms and telemetry pipelines.
• Integrate, normalize, enrich, and correlate telemetry from endpoint, identity, cloud, application, infrastructure, network, and AI-enabled systems.
• Develop and tune behavioral detections, correlation logic, dashboards, and alerting strategies.
• Translate threat intel, incidents, vulnerabilities, and offensive-security results into improved detection content.
• Automate telemetry management and security workflows while maintaining human oversight and explainability.
• Optimize SIEM and related systems for reliability, data quality, performance, retention, and cost.

Skills

SIEM & security analytics

Telemetry & observability

APIs & IaC scripting

Tools

APIs

Infrastructure-as-Code tooling

Job description

Backblaze is seeking a Security Analytics Engineer to design, operate, and continually improve its security telemetry, analytics, detection engineering, and observability capabilities in a fully remote team. You will help extend SIEM and apply AI-assisted correlation to protect data across endpoints, clouds, and applications.

This role requires hands‑on experience with large‑scale telemetry, event normalization, dashboards, and alerting, plus scripting and IaC skills to automate workflows with