Senior Detection & Response Engineering Lead

Beyondfinance; Chicago (IL); On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

Health/dental/vision

PTO & holidays

Parental leave

401(k) matching

Career development

Job summary

Beyond Finance is seeking a senior security operations leader to own detection and response across our SaaS, endpoints, and AWS environments. You’ll stay hands-on while coaching the team and maturing the detections, pipelines, and investigations as we introduce automation and AI into security operations.

You will drive detection engineering, logging, and detection-as-code, with a clear mandate to build new capabilities from architecture through production and to lead reporting to security and IT

Qualifications

• 7+ years in security operations, detection, or incident response.
• Ability to break down roadmaps into concrete, sequenced work for the team.
• Writes scripts and builds detection logic as code.
• Track record of taking projects from prototype to production, including architecture and hands-on build.
• Depth in SIEM and SOAR; experience with Datadog Cloud SIEM and AWS.

Responsibilities

• Own detection and response for the environment: monitor, triage, and incident response across SaaS apps, user workstations, and AWS.
• Lead the response when an incident is confirmed; manage on-call rotation.
• Own detection lifecycle: write, tune, retire detections; map to MITRE ATT&CK; reduce false positives.
• Manage logging pipeline: ingest, normalize, enrich telemetry through APIs and connectors.
• Move detections into version control with testing and peer reviews.

Skills

7+ years in security ops

Script/write detections as code

Mentoring engineers/analysts

KPIs: MTTR, coverage, false positives

Tools

Datadog SIEM

AWS logs

Job description

Beyond Finance is seeking a senior security operations leader to own detection and response across our SaaS, endpoints, and AWS environments. You’ll stay hands-on while coaching the team and maturing the detections, pipelines, and investigations as we introduce automation and AI into security operations.

You will drive detection engineering, logging, and detection-as-code, with a clear mandate to build new capabilities from architecture through production and to lead reporting to security and IT