Senior Detection Engineer | SecOps
Core
Own detection engineering end-to-end in Datadog Cloud SIEM, building coverage, tuning rules, and automating response for a fintech security team.
Role type
Senior Detection Engineer (SecOps)
Builds
Reliable detection coverage, automated rule validation, and incident response capabilities in Datadog Cloud SIEM.
Domain
Cybersecurity, Cloud Security, Fintech
Required skills
Detection engineering, Cloud SIEM (Datadog, Splunk, Elastic), AWS logs (CloudTrail, IAM), SaaS audit logs, Detections as code (Terraform, Git, CI), MITRE ATT&CK mapping, Python automation, Incident response
Preferred skills
CrowdStrike Falcon, Kubernetes audit logs, Threat hunting, Agentic workflows (Claude, OpenAI), Fintech/Payments background
Technologies
Datadog Cloud SIEM, Terraform, Git, CI pipelines, Python, AWS, CloudTrail, IAM, Google Workspace, GitHub, GitLab, Okta, Atomic Red Team, Stratus Red Team
Responsibilities
Identify missing log sources and prioritize onboarding; Write, test, and tune detection rules to reduce false positives; Map coverage to MITRE ATT&CK and validate via attack reproduction; Manage detections as code with version control and CI; Build and run AI agents for rule authoring, validation, triage, and threat hunting; Investigate security incidents and document findings; Develop automated response and containment capabilities; Track and communicate detection coverage and performance to leadership.
Seniority
Senior, hands-on IC
