← All roles

Sr. Security Engineer (Detection)

Solace· Security & IT
Apply on company site
Remote$150k - $200k + equityFull-timePosted 2mo ago

About the role

Senior security engineer focusing on ownership of the detection and alerting program, building and tuning detections in a Datadog Cloud SIEM within a HIPAA-regulated environment, and leading incident response on a small security team.

Responsibilities

  • Own our Datadog Cloud SIEM: log pipelines, parsing, enrichment, retention, and cost management
  • Build, tune, and maintain detection rules across our environment — identity (Okta, Google Workspace), cloud (AWS, GCP), endpoint (Jamf), data platforms (Snowflake), and SaaS audit logs (GitHub, Slack, and more)
  • Systematically reduce alert noise and drive alert quality metrics (fidelity, time-to-triage, false-positive rates)
  • Map detection coverage against real-world threats (MITRE ATT&CK) and close the highest-risk gaps first
  • Treat detections as code: version-controlled, tested, documented, and peer-reviewed
  • Ensure logging and audit trails meet HIPAA requirements for ePHI systems
  • Serve as a primary responder for security alerts and incidents: triage, investigate, contain, and document
  • Improve and extend our incident response playbooks, and run post-incident reviews that produce real fixes
  • Build automation to speed up triage and response (enrichment, auto-containment, workflow automation)
  • Participate in and help mature our on-call rotation as the team grows
  • Contribute to cloud and infrastructure security hardening across AWS and GCP
  • Support identity and access management improvements (Okta policies, access reviews, least privilege)
  • Pitch in on vendor security reviews, security questionnaires, and audit evidence gathering (HIPAA, SOC 2)
  • Help build a security-first culture through documentation, tooling, and partnership with engineering teams

Qualifications

  • 3–6 years in security operations, detection engineering, incident response, or similar hands-on security roles
  • Real experience building and tuning detections in a SIEM — Datadog Cloud SIEM strongly preferred, but deep experience with Splunk, Elastic, Chronicle, Sentinel, or Panther translates well
  • Fluency reading and correlating logs from cloud providers (CloudTrail, GCP audit logs), identity providers, and SaaS platforms
  • Hands-on incident response experience: triaged real alerts, worked real incidents, and written post-mortems
  • Scripting ability (Python or similar) for automation, log analysis, and detection tooling
  • Strong understanding of common attack patterns — phishing, credential compromise, SSO abuse, cloud misconfigurations, supply chain risks
  • Comfortable with ambiguity and building from scratch; startup or small-team experience is a strong signal

Skills

Required:Detection engineeringDatadog Cloud SIEMIncident responseScripting (Python or similar)

Benefits

  • Compensation: $150K – $200K
  • Offers Equity
Last updated Oct 8, 2026. Interested? Apply on the company site.

About Solace

Find your advocate today.

Solace is a healthcare advocacy company dedicated to helping patients navigate the healthcare system and improve health outcomes.

healthcareadvocacymedicarepatient advocateremote serviceshealthcare navigation
Company profileWebsite

More open roles at Solace