Senior Detection Engineer – SIEM, IR & Cloud Security

Solace; Redwood City (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Solace seeks a Sr. Security Engineer to own our detection and alerting program end to end in a HIPAA-regulated environment. You will turn telemetry from Datadog and other sources into high-signal detections, write rules, and reduce noise while ensuring fast, reliable incident response.

You will collaborate with application and infrastructure security engineers, scale our playbooks, and drive security-first culture. Applicants must be based in the United States.

Qualifications

• 3-6 years in security operations or detection engineering.
• Experience building/detecting rules in a SIEM (Datadog preferred).
• Fluency reading/correlating logs from clouds, identity providers, and SaaS.
• Hands-on incident response and post-mortems.
• Scripting in Python or similar for automation.
• Understanding attack patterns: phishing, credential compromise, cloud misconfig.
• Comfort with ambiguity; startup experience.

Responsibilities

• Own Datadog Cloud SIEM pipelines: parsing, enrichment, retention, and cost.
• Build, tune, and maintain detection rules across identity, cloud, endpoint, data platforms, and SaaS logs.
• Reduce alert noise and improve alert quality metrics.
• Map detection coverage to MITRE ATT&CK and close high-risk gaps.
• Detections are code: version-controlled, tested, documented, peer-reviewed.
• Ensure logging/audit trails meet HIPAA requirements.

Skills

Security operations

Detection engineering

Incident response

Scripting (Python)

Log analysis

Threat literacy

Startup environment

Tools

Datadog Cloud SIEM

Splunk

Elastic

Job description

Solace seeks a Sr. Security Engineer to own our detection and alerting program end to end in a HIPAA-regulated environment. You will turn telemetry from Datadog and other sources into high-signal detections, write rules, and reduce noise while ensuring fast, reliable incident response.

You will collaborate with application and infrastructure security engineers, scale our playbooks, and drive security-first culture. Applicants must be based in the United States.