7 hours ago
Kansas City, MO, USA or San Jose, CA, USASenior
Responsibilities
- Deploy, configure, and maintain SIEM, SOAR, and EDR environments across multiple vendors.
- Manage EDR prevention policies, host groups, custom IOAs, exclusions, SIEM detection content, and SOAR connectors.
- Troubleshoot EDR agent performance issues, kernel or driver conflicts, upgrade rollouts, and false positives.
- Develop, test, and deploy production Python services with APIs, workers, queues, tests, CI, and containers.
- Build automated detection, containment, and remediation workflows such as host isolation, process termination, file quarantine, account disabling, and ticket creation.
- Design safety guardrails including approval thresholds, allow lists, rate limits, audit trails, and safe release or rollback paths.
- Own platform reliability and latency outcomes, participate in the security tooling on-call rotation, and build observable internal tools with logging, metrics, and alerting.
Requirements
- Deep, hands-on experience operating multiple SIEM, SOAR, and EDR platforms.
- Proven experience building and maintaining production Python services and APIs.
- Experience integrating complex vendor APIs and managing authentication, rate limits, and retries.
- Demonstrated experience building automated detection and response workflows with carefully designed safety guardrails.
- Track record of end-to-end production ownership of a platform rather than only a component.
- A bachelor's or master's degree in Computer Science, Engineering, or a related field.
- Preferred qualifications include multi-tenant EDR experience, Go and/or Python proficiency, detection-as-code experience, and experience in MDR/MSSP, SOAR, EDR vendor, or mature security operations environments.
- Relevant AWS, GCP, Kubernetes, or security certifications are a plus.
Benefits
- Competitive salary and benefits package.
- Culture of growth and development with opportunities to expand knowledge in AI, cybersecurity, and emerging technologies.
- Work location is San Jose, CA, or Overland Park, KS, with four onsite days Monday through Thursday.
Tech Stack
Categories
Forward Deployed
About TENEX.AI
TENEX.AI provides an AI-driven Managed Detection and Response (MDR) service that combines automated threat detection with 24/7 U.S.-based analysts for enterprises. It sells MDR subscriptions and related cybersecurity services delivered through its AI SOC platform. Founded in 2024 and headquartered in Sarasota, Florida, the privately held company reached Series B financing by 2026.