5 months ago
Kansas City, MO, USA or Scottsdale, AZ, USAMid Level
Responsibilities
- Author, tune, and maintain detection rules, correlation logic, and threat content across Google SecOps and Microsoft Sentinel.
- Build and validate log parsers for new customer data sources.
- Develop and maintain SOAR playbooks, automation workflows, and dashboards.
- Build Cloud Run functions, scripts, and API integrations when native connectors or content are unavailable.
- Collaborate with Deployment Engineers to prepare content for customer go-lives.
- Identify detection coverage gaps and develop content to address them.
- Apply threat intelligence and adversary TTPs using MITRE ATT&CK in detection logic.
- Train customers on detection content, dashboards, and platform capabilities at an advanced technical level.
- Document content with metadata, use cases, and tuning notes.
- Support AI-assisted content generation workflows with human review as the quality gate.
Requirements
- At least 3 years of experience in detection engineering, content engineering, or security operations.
- Strong proficiency in SIEM detection rule development using YARA-L, KQL, or similar technologies.
- Experience building and maintaining SOAR playbooks and automation workflows.
- Proficiency developing log parsers for diverse data sources.
- Knowledge of MITRE ATT&CK and its application to detection content.
- Experience with Python, Cloud Run functions, and API integrations.
- Experience building security dashboards for operational use cases.
- Understanding of threat intelligence and translating adversary TTPs into actionable detection logic.
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
- Relevant certifications such as CISSP, CISM, GIAC certifications, Google Cloud Professional, Microsoft SC-200/AZ-500, or AWS Certified Solutions Architect are preferred.
- Strong problem-solving, troubleshooting, customer-facing communication, and collaboration skills are required.
About TENEX.AI
TENEX.AI provides an AI-driven Managed Detection and Response (MDR) service that combines automated threat detection with 24/7 U.S.-based analysts for enterprises. It sells MDR subscriptions and related cybersecurity services delivered through its AI SOC platform. Founded in 2024 and headquartered in Sarasota, Florida, the privately held company reached Series B financing by 2026.