Saronic
Security Engineer, Detection Engineering
Austin, TX
No sponsorship$171k-$800kDetected 26 days ago
PythonPowerShellAWSAzureCloud PlatformsTerraformCI/CDLinuxData EngineeringCybersecuritySIEMKQLSOARSOC OperationsDetection EngineeringIncident ResponseRoboticsTest Automation
About the role
- We're seeking a Security Engineer at the senior-level or above on our Security Operations team with strong detection engineering experience.
- This role is heavily weighted toward detection engineering.
Responsibilities
- Design, build, test, and tune high-fidelity detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry sources
- Develop and maintain detection content using detection-as-code practices including version-controlled logic, automated testing, and CI/CD deployment
- Build and operate pipelines to ingest, normalize, enrich, and manage security telemetry at scale across diverse data sources, using Terraform and infrastructure-as-code practices to deploy and maintain logging and detection infrastructure
- Design and maintain log collection, parsing, and enrichment configurations that ensure the right telemetry is available at the right fidelity for detection and investigation
- Develop and manage automated response playbooks in SOAR platforms to accelerate containment and reduce analyst toil
- Build automation that enriches alerts with contextual data, reducing investigation time and improving analyst decision-making
- Support incident response efforts and translate lessons learned into improved detections and playbooks
- Partner with SOC analysts, Cloud Security, Product Security, and IT teams to close visibility and detection gaps across environments
- Collaborate with threat intelligence to ensure detection engineering is informed by current adversary TTPs relevant to defense, maritime, and autonomous systems
Requirements
- 3+ years of hands-on experience in detection engineering, security operations, security automation, or a closely related security engineering role
- Demonstrated experience designing, testing, and tuning detection rules and analytic queries across production security telemetry (endpoint, cloud, network, identity, or DLP)
- Hands-on experience with SIEM platforms and proficiency with query languages such as SPL, KQL, or equivalent
- Hands-on coding experience in Python, PowerShell, Go, or Rust for security automation, detection tooling, or pipeline development, and familiarity with Terraform for managing detection and logging infrastructure as code
Nice to have
- Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments
- Experience with EDR platforms including custom detection rule creation and telemetry analysis
- Experience with cloud-native detection in AWS and Microsoft 365/Azure
- Hands-on experience with incident response, threat hunting, or adversary emulation
- Exposure to embedded Linux, operational technology, or ICS telemetry and detection
- Relevant certifications such as GCIH, GCIA, GCDA, GSOM, OSDA, or OSCP
- Familiarity with NIST SP 800-171, NIST SP 800-53, or CMMC and their logging and monitoring requirements
Skills
- Security at Saronic is a force multiplier.
Compensation
- Industry-standard salaries with opportunities for performance-based bonuses
- Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
Benefits
- Free lunch benefit and unlimited free drinks and snacks in the office
- Medical Insurance: Comprehensive health insurance plans covering a range of services
- Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
- Time Off: Generous PTO and Holidays
- Parental Leave: Paid maternity and paternity leave to support new parents
- Retirement Plan: 401(k) plan
- Stock Options: Equity options to give employees a stake in the company's success
- Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
Company info
- We are also committed to providing reasonable accommodations for qualified individuals with disabilities.
Visa & Work Authorization
- Ability to obtain and maintain a security clearance
Apply directly at Saronic →Create a free account for alerts like thisView Saronic immigration profile
This listing is sourced directly from Saronic's careers page and normalized into a canonical job model.