Beyond Finance

Beyond Finance

Detection & Response Engineer

Chicago, IL (Hybrid) · Mid · Full-time

Sponsorship not specified$100k-$120kDetected 16 days ago
Cloud PlatformsCI/CDDatadogCybersecuritySIEMSOC OperationsDetection EngineeringIncident Response

Stay score

odds of building a lasting career here

50Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds (Level II)66
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~30% per draw at Level II). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card filing pattern in this occupation

Context, not a finding about this posting: of this employer's 3 green-card filings in this occupation, 100% were for a worker who already held the job.

Files H-1B transfers

2 transfer filings in the last year, covering 2 workers. Median labor-condition decision: 8 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • You'll be the team's Datadog expert, owning how security telemetry gets into Datadog Cloud SIEM, how it's filtered, and the detections that run on it.
  • Measurement: track coverage, false-positive rate, and automation rate to decide what to fix next.

Responsibilities

  • You'll also automate the repetitive work around alerts and support triage and investigations.
  • As we bring automation and AI into security operations, you'll help build and ship the new capabilities.
  • Logging pipeline: onboard sources and build Datadog log pipelines that parse, normalize, and enrich security telemetry.
  • Detection-as-code: manage detections in version control with testing and peer review.
  • Automation: build workflows for alert enrichment, triage, containment, and notification.
  • AI in the SOC: build AI-assisted triage and alert summarization, with a human in the loop.
  • Security operations: support triage, investigations, and incident response, including on-call.
  • You write your own scripts and build detection logic as code.

Requirements

  • 3+ years in security operations, detection engineering, or security engineering.
  • Experience with automation orchestration tooling.
  • Experience with security telemetry from cloud platforms, SaaS applications, and EDR.
  • You can take a project from prototype to production with little direction.
  • The Ideal Candidate
  • The ideal candidate measures success by real threats caught and noise removed, not by the number of detections written.
  • You write your own scripts and build detection logic as code. Infrastructure as code and CI/CD experience is a plus.
  • Deep hands-on Datadog experience, especially Cloud SIEM detection rules and log pipelines.
  • Working knowledge of MITRE ATT&CK. Threat hunting or purple teaming experience is a plus.
  • The ideal candidate measures success by real threats caught and noise removed, not by the number of detections written. Automating a problem is their first move, and they would rather ship a working detection this week and tune it than wait for a perfect rule. They know Datadog well enough to test every parsing and detection change against real logs before calling it done. They use AI to move faster but verify its output, and when they find a coverage gap or a noisy log source, they fix it instead of filing a ticket.
  • The base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus.
  • Base Salary Range
  • $100,000 - $120,000 USD
  • Why Join Us?
  • While you make a difference for others, we'll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer:

Nice to have

  • Infrastructure as code and CI/CD experience is a plus.
  • Working knowledge of MITRE ATT&CK.
  • Threat hunting or purple teaming experience is a plus.

Skills

  • Detection engineering: write, tune, and retire Cloud SIEM detections, and map coverage to MITRE ATT&CK to close gaps.

Compensation

  • $100,000 - $120,000 USD

Benefits

  • Considerable employer contributions for health, dental, and vision programs
  • Generous PTO, paid holidays, and paid parental leave

Company info

  • At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future.
Apply directly at Beyond Finance →Create a free account for alerts like thisView Beyond Finance immigration profile

This listing is sourced directly from Beyond Finance's careers page and normalized into a canonical job model.