Beyond Finance Logo

Beyond Finance

Detection & Response Engineer

Posted 12 Days Ago
Be an Early Applicant
Easy Apply
Hybrid
Chicago, IL
100K-120K Annually
Mid level
Easy Apply
Hybrid
Chicago, IL
100K-120K Annually
Mid level
Build and manage Datadog Cloud SIEM detections, logging pipelines, and detection-as-code workflows for cloud, SaaS, and endpoint telemetry. Develop automation for alert enrichment, triage, containment, and notifications, including AI-assisted SOC capabilities. Support threat hunting, investigations, incident response, and on-call operations while measuring detection coverage, false positives, and automation effectiveness.
The summary above was generated by AI

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future.

While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you.

The Role

You'll build the detections and automation that protect our cloud, SaaS applications, and user workstations. You'll be the team's Datadog expert, owning how security telemetry gets into Datadog Cloud SIEM, how it's filtered, and the detections that run on it. You'll also automate the repetitive work around alerts and support triage and investigations. As we bring automation and AI into security operations, you'll help build and ship the new capabilities.

What You'll Own

  • Detection engineering: write, tune, and retire Cloud SIEM detections, and map coverage to MITRE ATT&CK to close gaps.
  • Logging pipeline: onboard sources and build Datadog log pipelines that parse, normalize, and enrich security telemetry.
  • Detection-as-code: manage detections in version control with testing and peer review.
  • Automation: build workflows for alert enrichment, triage, containment, and notification.
  • AI in the SOC: build AI-assisted triage and alert summarization, with a human in the loop.
  • Measurement: track coverage, false-positive rate, and automation rate to decide what to fix next.
  • Filtering and cost: manage indexes, exclusion filters, and retention tiers to cut noise and cost without losing coverage.
  • Security operations: support triage, investigations, and incident response, including on-call.

What You Bring

  • 3+ years in security operations, detection engineering, or security engineering.
  • You write your own scripts and build detection logic as code. Infrastructure as code and CI/CD experience is a plus.
  • Deep hands-on Datadog experience, especially Cloud SIEM detection rules and log pipelines.
  • Experience with automation orchestration tooling.
  • Working knowledge of MITRE ATT&CK. Threat hunting or purple teaming experience is a plus.
  • Experience with security telemetry from cloud platforms, SaaS applications, and EDR.
  • You can take a project from prototype to production with little direction.

The Ideal Candidate

The ideal candidate measures success by real threats caught and noise removed, not by the number of detections written. Automating a problem is their first move, and they would rather ship a working detection this week and tune it than wait for a perfect rule. They know Datadog well enough to test every parsing and detection change against real logs before calling it done. They use AI to move faster but verify its output, and when they find a coverage gap or a noisy log source, they fix it instead of filing a ticket.

#LI-LB2

The base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus.

Base Salary Range
$100,000—$120,000 USD

Why Join Us?

While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer:

  • Considerable employer contributions for health, dental, and vision programs
  • Generous PTO, paid holidays, and paid parental leave
  • 401(k) matching program
  • Merit advancement opportunities
  • Career development & training

And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization.

Beyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions.  No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team.  No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team.

Similar Jobs at Beyond Finance

2 Hours Ago
Easy Apply
Hybrid
Easy Apply
170K-210K Annually
Senior level
170K-210K Annually
Senior level
Fintech • Financial Services
Leads architectural decisions, web roadmap delivery, and API acquisition efforts. Partners with leadership on engineering roadmaps and technical feasibility, mentors engineers, promotes best practices, and guides scalable application development and project planning. The role requires engineering team management, Ruby on Rails experience, cloud application development, strong communication, and effective mentorship.
Top Skills: APIsCloud ComputingRuby On Rails
5 Days Ago
Easy Apply
Remote or Hybrid
United States
Easy Apply
25-27 Annually
Mid level
25-27 Annually
Mid level
Fintech • Financial Services
Manages payment setup and clearing operations, including settlement pipelines, exception reporting, payment documentation, proof-of-payment requests, and account ledger reviews. Communicates with creditors, agencies, law offices, and payment processors to resolve issues. Maintains Salesforce records, handles clerical and correspondence tasks, supports internal inquiries and special projects, and ensures accuracy while managing multiple priorities and deadlines.
Top Skills: AdobeExcelMicrosoft OutlookMicrosoft PowerpointMicrosoft WordSalesforce
21 Days Ago
Easy Apply
Hybrid
Easy Apply
110K-140K Annually
Junior
110K-140K Annually
Junior
Fintech • Financial Services
Support and maintain AWS cloud infrastructure, CI/CD pipelines, and containerized environments. Automate provisioning with Terraform, OpenTofu, Helm, or CloudFormation; monitor performance; troubleshoot issues; and support application scalability. The role contributes to cloud security, code reviews, documentation, runbooks, routine deployments, and rotating on-call coverage while collaborating with engineering teams.
Top Skills: ArtilleryAWSAws CodepipelineCi/CdCircleCICloudflareCloudFormationDatadogDockerEcsEksGeminiGitGithub CopilotGitopsHelmInfisicalKubernetesLambdaLensLinearOpentofuPagerdutyRdsS3SpaceliftTerraformWiz

What you need to know about the Boston Tech Scene

Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.

Key Facts About Boston Tech

  • Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
  • Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
  • Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
  • Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account