Senior Security Engineer
Exabeam · Broomfield, CO ·
- Work mode
- Hybrid
- Seniority
- Senior
- Category
- Security
Exabeam is a leader in intelligence and automation that powers security operations for the world's smartest companies. As a global cybersecurity innovator, Exabeam provides industry-proven, security-focused, and flexible solutions for faster, more accurate threat detection, investigation, and response (TDIR). Exabeam and LogRhythm have merged.
About the role
We are looking for a Senior Security Engineer to join our Engineering organization in Broomfield, Colorado. This is a senior individual-contributor role on the team that builds and hardens the detection capabilities at the core of our SIEM and UEBA products.
You will work close to the product: designing detection logic, improving how behavioural analytics models are applied to customer telemetry, and partnering with product management and threat research to turn emerging adversary techniques into shipped detection content. You will also act as a technical reference for engineers across the platform, reviewing designs and raising the security bar of what we build.
This role suits an engineer who is equally comfortable reading a threat report and reading a stack trace.
About the role
We are looking for a Senior Security Engineer to join our Engineering organization in Broomfield, Colorado. This is a senior individual-contributor role on the team that builds and hardens the detection capabilities at the core of our SIEM and UEBA products.
You will work close to the product: designing detection logic, improving how behavioural analytics models are applied to customer telemetry, and partnering with product management and threat research to turn emerging adversary techniques into shipped detection content. You will also act as a technical reference for engineers across the platform, reviewing designs and raising the security bar of what we build.
This role suits an engineer who is equally comfortable reading a threat report and reading a stack trace.
- Design, build, and maintain detection content and correlation logic across the Exabeam and LogRhythm product lines.
- Translate adversary techniques and threat-research findings into production detection rules and behavioural analytics models.
- Tune detection logic to reduce noise for security operations teams, and document the reasoning behind each detection.
- Partner with product management, threat research, and customer-facing engineers to prioritise detection coverage.
- Review designs and code from engineers across the platform, acting as a senior technical reference on security engineering practice.
- Investigate escalated product issues that require deep knowledge of log ingestion, parsing, and normalisation.
- Contribute to the engineering standards, tooling, and automation the team relies on.
Essential
- Substantial professional experience in security engineering, detection engineering, or a closely related discipline.
- Hands-on experience with SIEM platforms, log ingestion pipelines, and the query languages used for security analytics.
- Strong working knowledge of adversary tradecraft and a detection framework such as MITRE ATT&CK.
- Proficiency in at least one programming or scripting language used for automation and data processing, for example Python or Go.
- Practical understanding of operating system, network, identity, and cloud telemetry, and what normal and abnormal look like in each.
- Ability to communicate technical reasoning clearly in writing, to both engineers and security practitioners.
Desirable
- Experience with user and entity behaviour analytics (UEBA), or with applying machine learning to security telemetry.
- Background working in or alongside a security operations centre.
- Experience with cloud platforms such as AWS, Azure, or GCP, and with containerised deployments.
- Relevant certifications such as GCIA, GCIH, OSCP, or CISSP.
- Competitive health packages
- Life insurance
- Pre-tax Flexible Spending Accounts, 401(k)
- Parental leave
- Wellness and education
- Flexible vacation
- Recharge 'Thank You' days