Senior Security Engineer: Detection & Incident Response

Solace; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

solace is seeking a Senior Security Engineer in the United States to lead detection engineering and incident response within a HIPAA-regulated healthcare technology environment. You will shape foundational security operations by turning log telemetry into a high-signal detection program that enables fast, accurate responses.

You will own end-to-end Datadog Cloud SIEM, tune detections across cloud, identity, data platforms, and SaaS logs, and reduce alert noise while aligning with MITRE ATT&CK.

Qualifications

• 3–6 years in security operations or similar roles.
• Hands-on experience building and tuning detections in a SIEM (Datadog preferred).
• Fluency reading and correlating logs from cloud providers, identity providers, and SaaS platforms.
• Hands-on incident response experience with triaged alerts and post-mortems.
• Scripting ability in Python or similar for automation and detection tooling.
• Strong understanding of attack patterns such as phishing, credential compromise, SSO abuse, and cloud misconfigurations.

Responsibilities

• Own the Datadog Cloud SIEM end-to-end: pipelines, parsing, enrichment, retention, and cost.
• Build, tune, and maintain detection rules across cloud, identity, data platforms, and SaaS logs.
• Reduce alert noise and track fidelity, time-to-triage, and false positives, mapped to MITRE ATT&CK.
• Treat detections as code with version control, testing, and peer review.
• Serve as primary responder for security alerts and incidents; extend incident response playbooks.
• Contribute to hardening, IAM improvements, vendor reviews, and audit evidence gathering.

Skills

Security operations

Detection engineering

Incident response

Python scripting

Log analysis

MITRE ATT&CK

Education

Bachelor's degree or equivalent

Tools

Datadog Cloud SIEM

Splunk

Elastic

Chronicle

Microsoft Sentinel

Panther

Job description

solace is seeking a Senior Security Engineer in the United States to lead detection engineering and incident response within a HIPAA-regulated healthcare technology environment. You will shape foundational security operations by turning log telemetry into a high-signal detection program that enables fast, accurate responses.

You will own end-to-end Datadog Cloud SIEM, tune detections across cloud, identity, data platforms, and SaaS logs, and reduce alert noise while aligning with MITRE ATT&CK.