{"id":1152105,"url":"https://alion.io/job/beyond-finance-detection-response-engineer","title":"Detection & Response Engineer","company":{"id":6658,"name":"Beyond Finance","domain":"beyondfinance.com","url":"https://alion.io/company/beyond-finance","size_band":"1001-5000","is_staffing_agency":false,"is_intermediary":false,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":60,"open_postings":33,"ghost_share":0.667,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-09-24T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Datadog","optional":false},{"name":"Datadog Cloud Security","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-23T17:53:48Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-09-24T11:56:43Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":0},"description":"At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future.\nWhile we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you.\nThe Role\nYou'll build the detections and automation that protect our cloud, SaaS applications, and user workstations. You'll be the team's Datadog expert, owning how security telemetry gets into Datadog Cloud SIEM, how it's filtered, and the detections that run on it. You'll also automate the repetitive work around alerts and support triage and investigations. As we bring automation and AI into security operations, you'll help build and ship the new capabilities.\nWhat You'll Own\nDetection engineering: write, tune, and retire Cloud SIEM detections, and map coverage to MITRE ATT&CK to close gaps.\nLogging pipeline: onboard sources and build Datadog log pipelines that parse, normalize, and enrich security telemetry.\nDetection-as-code: manage detections in version control with testing and peer review.\nAutomation: build workflows for alert enrichment, triage, containment, and notification.\nAI in the SOC: build AI-assisted triage and alert summarization, with a human in the loop.\nMeasurement: track coverage, false-positive rate, and automation rate to decide what to fix next.\nFiltering and cost: manage indexes, exclusion filters, and retention tiers to cut noise and cost without losing coverage.\nSecurity operations: support triage, investigations, and incident response, including on-call.\nWhat You Bring\n3+ years in security operations, detection engineering, or security engineering.\nYou write your own scripts and build detection logic as code. Infrastructure as code and CI/CD experience is a plus.\nDeep hands-on Datadog experience, especially Cloud SIEM detection rules and log pipelines.\nExperience with automation orchestration tooling.\nWorking knowledge of MITRE ATT&CK. Threat hunting or purple teaming experience is a plus.\nExperience with security telemetry from cloud platforms, SaaS applications, and EDR.\nYou can take a project from prototype to production with little direction.\nThe Ideal Candidate\nThe ideal candidate measures success by real threats caught and noise removed, not by the number of detections written. Automating a problem is their first move, and they would rather ship a working detection this week and tune it than wait for a perfect rule. They know Datadog well enough to test every parsing and detection change against real logs before calling it done. They use AI to move faster but verify its output, and when they find a coverage gap or a noisy log source, they fix it instead of filing a ticket.\nThe base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus.\nBase Salary Range\n$100,000—$120,000 USD\nWhy Join Us?\nWhile you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer:\nConsiderable employer contributions for health, dental, and vision programs\nGenerous PTO, paid holidays, and paid parental leave\n401(k) matching program\nMerit advancement opportunities\nCareer development & training\nAnd finally, our team spirit and culture! Wecultivate an environment of community, connection, and belonging across our entire organization.\nBeyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions. No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team. No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team.","description_format":"text","description_chars":4255,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","FinTech","Personal Finance"],"lifecycle":[{"event":"open","at":"2026-09-23T18:19:37Z"}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:2","stale_co","win:early"],"computed_at":"2026-09-24T05:45:00Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/beyond-finance-detection-response-engineer","json_url":"https://alion.io/job/beyond-finance-detection-response-engineer.json","meta":{"generated_at":"2026-09-24T14:34:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers"}}