← All roles

Forward Deployed Data Engineer

TENEX.AI· FDE
Apply on company site
Hybrid (Kansas City, MO SOC), Hybrid (Sarasota, FL HQ), Hybrid (Scottsdale, AZ)Full-timePosted 4mo ago

About the role

Forward Deployed Data Engineer — SIEM/SOAR focused role building detection rules, log parsers, SOAR playbooks, dashboards, and integrations to enable TENEX's MDR platform; acts as a technical trainer for customers and ensures content quality and readiness for go-lives.

Responsibilities

  • Author, tune, and maintain detection rules, correlation logic, and threat content across Google SecOps and Microsoft Sentinel
  • Build and validate log parsers for new data sources integrated into customer environments
  • Develop and maintain SOAR playbooks, automation workflows, and dashboards for common alert types and operational use cases
  • Build cloud run functions, scripts, and API integrations where native connectors or content do not exist
  • Collaborate with Deployment Engineers to ensure content is ready for new customer go-lives
  • Monitor detection coverage gaps and proactively develop content to address them
  • Incorporate threat intelligence and adversary TTPs (MITRE ATT&CK) into detection logic
  • Serve as an advanced enablement resource for customers — training them on detection content, dashboards, and platform capabilities at a deeper technical level
  • Document all content with clear metadata, use cases, and tuning notes
  • Support AI-assisted content generation workflows with human review as the quality gate

Qualifications

  • 3+ years in detection engineering, content engineering, or security operations
  • Strong proficiency in SIEM detection rule development — YARA-L for Google SecOps, KQL for Sentinel, or similar
  • Experience building and maintaining SOAR playbooks and automation workflows
  • Proficiency with log parser development for diverse data source types
  • Knowledge of MITRE ATT&CK framework and its application to detection content
  • Experience with Python, cloud run functions, and REST API integrations
  • Experience building security dashboards for operational use cases
  • Understanding of threat intelligence and how TTPs translate into actionable detection logic

Skills

Required:SIEM detection rule developmentSOAR playbooks and automationLog parser developmentPython, cloud run functions, REST API

Benefits

  • Competitive salary and benefits package
  • Opportunity to work with cutting-edge AI-driven cybersecurity technologies
  • Culture of growth and development with expanding expertise in AI, cybersecurity, and engineering
Last updated Jul 16, 2026. Interested? Apply on the company site.

About TENEX.AI

10x Your Cyber Security With Ai

With a focus on precision and scalability, TENEX delivers comprehensive cyber security solutions that evolve with your organization.

cyber securityAI-drivenAutomationManaged Detection and ResponseThreat ManagementIncident ResponseSecurity Automation
Company profileWebsite

More open roles at TENEX.AI