Senior Detection & Incident Security Engineer (HIPAA)

Socket.dev; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

Solace is seeking a Sr. Security Engineer to own the detection and alerting program in a HIPAA-regulated environment. You will lead SIEM efforts across identity, cloud, endpoint, and SaaS logs, writing detections, reducing noise, and ensuring fast, accurate responses.

You will collaborate with staff security engineers and on-call teams to mature incident response and build automations for faster triage and containment, helping define security standards across the stack.

Qualifications

• 3–6 years in security operations, detection engineering, incident response, or similar hands-on roles.
• Real experience building and tuning detections in a SIEM — Datadog Cloud SIEM strongly preferred.
• Fluency reading and correlating logs from cloud providers, identity providers, and SaaS platforms.
• Hands-on incident response experience: triage, investigations, post-mortems.
• Scripting ability (Python or similar) for automation and detection tooling.
• Strong understanding of common attack patterns (phishing, cloud misconfig, credential compromise).
• Comfortable with ambiguity and startup environments.

Responsibilities

• Own Datadog Cloud SIEM: log pipelines, parsing, enrichment, retention, cost management.
• Build, tune, and maintain detection rules across identity, cloud, endpoint, data platforms, and SaaS logs.
• Reduce alert noise and improve fidelity, time-to-triage, and false positives.
• Map detections to MITRE ATT&CK and close top risk gaps.
• Treat detections as code: versioned, tested, documented.
• Ensure logging/audit trails meet HIPAA for ePHI systems.
• Serve as primary responder for security alerts and incidents.
• Improve and extend incident response playbooks and post-incident reviews.
• Build automation to speed triage and response; contribute to on-call rotation.
• Contribute to cloud/infrastructure security hardening and IAM improvements.
• Assist in vendor security reviews and audit evidence gathering.

Skills

Security operations

Detection engineering

Incident response

Python scripting

SIEM tuning

Cloud logs

Tools

Datadog Cloud SIEM

Splunk

Elastic

Okta

Jamf

Snowflake

GitHub

Job description

Solace is seeking a Sr. Security Engineer to own the detection and alerting program in a HIPAA-regulated environment. You will lead SIEM efforts across identity, cloud, endpoint, and SaaS logs, writing detections, reducing noise, and ensuring fast, accurate responses.

You will collaborate with staff security engineers and on-call teams to mature incident response and build automations for faster triage and containment, helping define security standards across the stack.