Automation: build workflows for alert enrichment, triage, containment, and notification.
AI in the SOC: build AI-assisted triage and alert summarization, with a human in the loop.
Measurement: track coverage, false-positive rate, and automation rate to decide what to fix next.
Filtering and cost: manage indexes, exclusion filters, and retention tiers to cut noise and cost without losing coverage.
Security operations: support triage, investigations, and incident response, including on-call.
What You Bring
3+ years in security operations, detection engineering, or security engineering.
You write your own scripts and build detection logic as code. Infrastructure as code and CI/CD experience is a plus.
Deep hands-on Datadog experience, especially Cloud SIEM detection rules and log pipelines.
Experience with automation orchestration tooling.
Working knowledge of MITRE ATT&CK. Threat hunting or purple teaming experience is a plus.
Experience with security telemetry from cloud platforms, SaaS applications, and EDR.
You can take a project from prototype to production with little direction.
The Ideal Candidate
The ideal candidate measures success by real threats caught and noise removed, not by the number of detections written. Automating a problem is their first move, and they would rather ship a working detection this week and tune it than wait for a perfect rule. They know Datadog well enough to test every parsing and detection change against real logs before calling it done. They use AI to move faster but verify its output, and when they find a coverage gap or a noisy log source, they fix it instead of filing a ticket.
#LI-LB2
The base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus.
Base Salary Range
$100,000—$120,000 USD
Why Join Us?
While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer:
Considerable employer contributions for health, dental, and vision programs
Generous PTO, paid holidays, and paid parental leave
401(k) matching program
Merit advancement opportunities
Career development & training
And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization.
Beyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions. No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team. No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team.