Detection & Response Engineer
Beyond Finance · Chicago, IL (Hybrid)
About the role
A detection and response engineer at Beyond Finance who builds the detections and automation protecting its cloud, SaaS apps and workstations, and acts as the team's Datadog specialist. The role is hybrid in Chicago.
The engineer owns how security logs reach Datadog Cloud SIEM and are parsed and filtered, writes and tunes detections as code mapped to MITRE ATT&CK, automates enrichment, triage and containment, builds AI-assisted alert summaries with human review, tracks coverage and false-positive metrics, and joins investigations and on-call. The company wants three or more years in security operations or detection engineering, deep Datadog Cloud SIEM experience, scripting, orchestration tooling, and familiarity with cloud, SaaS and EDR telemetry.