Sr. Security Engineer (Detection)

📋 Description Own Datadog Cloud SIEM pipelines and enrichment. Build and tune detection rules across identity, cloud, endpoint, data platforms, and SaaS logs. Reduce alert noise and improve detection fidelity and triage speed. Map detection coverage to MITRE ATT&CK and close high-risk gaps. Detections as code: versioned, tested, documented, peer-reviewed. Ensure logging and audit trails meet HIPAA requirements for ePHI systems. 🎯 Requirements 3-6 years in security operations, detection, or incident response. Experience building and tuning detections in a SIEM; Datadog preferred, others ok. Fluent in reading/correlating logs from cloud providers, identity providers, and SaaS. Hands-on incident response experience with triage and post-mortems. Scripting ability (Python or similar) for automation and log analysis. Strong understanding of phishing, credential compromise, and SSO abuse. Nice to have: HIPAA, SOC 2, HITRUST experience in healthcare environments. Nice to have: Detection-as-code workflows (Terraform, CI/CD) or SOAR tooling.