Solace Health
Sr. Security Engineer (Detection)
United States (Remote)fulltimeseniorAdded 2 months ago
About this role
Solace seeks a Security Engineer to build and own a detection and alerting program using Datadog Cloud SIEM in a healthcare environment. You'll design detection rules across identity, cloud, and SaaS systems, drive down alert noise, and serve as a primary incident responder for a lean security team in a HIPAA-regulated startup.
What you'll do
- Own Datadog Cloud SIEM operations including log pipelines, parsing, enrichment, and cost management
- Build, tune, and maintain detection rules across Okta, Google Workspace, AWS, GCP, Jamf, Snowflake, and SaaS audit logs
- Systematically reduce alert noise and improve detection quality metrics (fidelity, false-positive rates)
- Triage, investigate, and respond to security alerts and incidents; improve playbooks and run post-incident reviews
- Map detection coverage against MITRE ATT&CK framework and close high-risk gaps
- Contribute to cloud security hardening, identity and access management, and vendor security reviews
What they're looking for
- SIEM administration (Datadog Cloud SIEM preferred; Splunk, Elastic, Chronicle, Sentinel, or Panther experience translates)
- Detection engineering and rule writing
- Cloud log analysis (CloudTrail, GCP audit logs)
- Identity provider platforms (Okta, Google Workspace)
- Incident response and triage
- AWS and GCP security
- HIPAA compliance and audit logging
- Infrastructure-as-code or version control for detections
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Solace Health
Solace Health builds data infrastructure and pipelines designed to enhance patient outcomes in healthcare. The company is hiring Data Engineers to architect robust data systems and collaborate across teams to deliver reliable data solutions.
- Website
- solacehealth.com
Likely interview questions
- Walk us through your experience building and tuning detections in a SIEM. What was your biggest challenge and how did you solve it?
- Describe a time you significantly reduced false positives in an alert. What metrics did you track and how did you measure success?