Senior Security Engineer - Detection & SIEM Lead

Solace; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Solace is seeking a Sr. Security Engineer to own detection and alerting, turning telemetry from Datadog SIEM into a high-signal security program in a HIPAA-regulated environment.

You will collaborate with engineering, build detection rules across identity, cloud, endpoint, data platforms, and SaaS logs, and contribute to incident response while maintaining comprehensive logging and audit trails. This role emphasizes ownership, hands-on automation, and continual improvement.

Qualifications

• 3–6 years in security operations, detection engineering, or similar hands-on roles.
• Experience building and tuning detections in a SIEM (Datadog Cloud SIEM preferred).
• Fluency reading and correlating logs from cloud providers, identity providers, and SaaS platforms.
• Hands-on incident response experience: triaged real alerts and wrote post-mortems.
• Scripting ability (Python or similar) for automation and detection tooling.
• Strong understanding of common attack patterns: phishing, credential compromise, SSO abuse, cloud misconfigurations, supply chain risks.
• Startup or small-team experience is a strong signal.

Responsibilities

• Own our Datadog Cloud SIEM: log pipelines, parsing, enrichment, retention, and cost management.
• Build, tune, and maintain detection rules across our environment — identity, cloud, endpoint, data platforms, and SaaS logs.
• Reduce alert noise and drive alert quality metrics.
• Map detection coverage against MITRE ATT&CK and close high-risk gaps.
• Treat detections as code: version-controlled, tested, documented, and peer-reviewed.
• Ensure logging and audit trails meet HIPAA requirements for ePHI systems.
• Incident Response: triage, investigate, contain, and document.
• Improve and extend incident response playbooks; run post-incident reviews.
• Build automation to speed up triage and response; participate in on-call rotation.

Skills

Security operations

Detection engineering

Datadog Cloud SIEM

Incident response

Python scripting

Cloud security (AWS, GCP)

Threat detection

Tools

Datadog Cloud SIEM

Splunk

Elastic

Chronicle

Sentinel

Panther

Okta

Jamf

GitHub

Snowflake

Job description

Solace is seeking a Sr. Security Engineer to own detection and alerting, turning telemetry from Datadog SIEM into a high-signal security program in a HIPAA-regulated environment.

You will collaborate with engineering, build detection rules across identity, cloud, endpoint, data platforms, and SaaS logs, and contribute to incident response while maintaining comprehensive logging and audit trails. This role emphasizes ownership, hands-on automation, and continual improvement.