{"id":1082390,"url":"https://alion.io/job/domaintools-solutions-engineer","title":"Solutions Engineer","company":{"id":3702,"name":"Domaintools","domain":"domaintools.com","url":"https://alion.io/company/domaintools","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":178000,"period":"year","method":"role_country_seniority_unknown","sample_n":229},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomali","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Databricks","optional":false},{"name":"DNS","optional":false},{"name":"Google SecOps","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Snowflake","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-09-21T02:54:54Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-11-14T15:57:13Z","board_verified":true,"closed_at":null,"days_open":54,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":54},"description":"The internet is the world's most dangerous attack surface. DomainTools maps it - and we're moving faster than ever.\nThe world's most advanced security teams rely on DomainTools to identify malicious infrastructure before attacks happen. We're in an active growth phase: shipping new products, expanding our intelligence platform well beyond our DNS roots, and positioning our data at the center of where cybersecurity is heading in the age of AI.\nToday, DomainTools delivers a comprehensive internet intelligence platform covering domains, IPs, hostnames, SSL certificates, passive DNS, real-time threat feeds, and AI-native integrations, with global visibility driven by massively scaled active and passive data observations. Our Iris Investigate platform, DNSDB / SIE passive DNS, real-time threat feeds, IrisQL, and newly launched MCP Server are the intelligence backbone for the most demanding security teams on earth.\nWe're hiring a Solutions Engineer to partner with our Account Executives, and Customer Success Managers for Europe. This is the technical face of DomainTools in front of the organisations we're built for. These are technical, skeptical, well-resourced buyers - the security teams at the world's largest financial institutions, governments, technology platforms, and defense organizations. They don't want a pitch. They want a peer.\nYou will own the technical win. You'll run discovery, design solutions, deliver demos that earn analyst respect on the first call, run POVs that produce evidence a customer can defend internally, and be the trusted technical peer through renewal and expansion.\nYou will have mentors and resources to assist with learning but your success will depend heavily on your ability to consume new information independently and using your initiative to reach out to experts within the organisation for specialist knowledge transfer.\nOur platform is expanding fast - real-time threat feeds, IrisQL, the MCP Server for AI-native security workflows, deepening integrations with Splunk, CrowdStrike, Google SecOps, Anomali, Cortex XSOAR, and more. The SE team is where product velocity meets customer reality. You'll shape both.\nTechnical Wins\nOwn discovery, technical qualification, solution design, demo, and POV for enterprise and strategic opportunities.\nTranslate customer pain - phishing, brand abuse, C2 discovery, third-party risk, fraud, DFIR, threat hunting, exposure management - into concrete DomainTools workflows across Iris Investigate, DNSDB / Farsight passive DNS, real-time threat feeds, and the MCP Server.\nDesign and defend integration architectures with SIEM, SOAR, TIP, XDR, and data platforms (Splunk, CrowdStrike, Google SecOps, Palo Alto Cortex, Anomali, Elastic, Microsoft Sentinel, Snowflake, Databricks, and the customer's homegrown stack).\nLead focused beginner through advanced training, onboarding, and education sessions to guide adoption of our solution set. \nCustomer Advocacy\nBe the technical trusted advisor from first call through renewal. The buyers in this seat are paranoid for good reason; earn the trust that gets you invited back.\nPartner with Customer Success and Support to be a key provider of expert technical support and make sure the win on paper becomes a win in production. \nRun executive briefings and technical deep-dives with equal fluency - the same day if needed.\nProduct & Market Feedback\nBe the customer’s voice into Product and Engineering. Bring back the signal that shapes the roadmap.\nBuild reusable technical assets - demo environments, integration recipes, IrisQL playbooks, MCP workflows, reference architectures - that make the whole SE team better.\nRegional Leadership\nPartner with your AEs to build the technical strategy: named-account plans, competitive posture, executive relationships, and pipeline health.\nRepresent DomainTools at events, customer advisory boards, and practitioner communities.\nRequirements\nMust-haves\n3+ years in a customer-facing technical role - Solutions Engineer, Sales Engineer, Solutions Architect, TAM, or a threat intel / SOC practitioner who has moved into pre-sales.\nExperience and knowledge of the cybersecurity landscape that underpins a strong fluency with the security buyer. You can hold your own in a room with a SOC director, a threat intel lead, and a CISO - in the same meeting.\nWorking knowledge of DNS, WHOIS/RDAP, passive DNS, SSL/TLS, HTTP, and the fundamentals of how internet infrastructure is abused by adversaries.\nHands-on comfort with at least one SIEM, one SOAR, and one TIP. You've built or debugged an integration, not just talked about one.\nComfort with RESTful APIs, JSON, and scripting (Python preferred). You don't need to ship production code; you do need to read it, prototype with it, and demo it live.\nExcellent demo and whiteboard skills. You can build a compelling narrative from a blank browser tab.\nWillingness to travel ~25% for customer meetings, events, and QBRs.\nStrong plus\nPrior experience at a threat intelligence, DNS, network security, or SOC-tooling vendor.\nExperience with agentic / LLM-driven security workflows, MCP servers, or building on top of security data lakes.\nBackground as a former analyst, incident responder, threat hunter, or CTI practitioner.\nFluency in French, or other European languages.","description_format":"text","description_chars":5293,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Threat Intelligence","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-21T02:54:54Z"}],"visa":[],"liveness":{"score":42,"band":"fade","label":"Fading","p_open":1,"p_active":0.768,"p_room":0.55,"age_days":54,"expected_fill_days":47,"reasons":["conf:0","win:tail"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/domaintools-solutions-engineer","json_url":"https://alion.io/job/domaintools-solutions-engineer.json","meta":{"generated_at":"2026-11-14T19:02:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23020,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3702},"rest":"https://alion.io/mcp/rest/get_company?id=3702"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdomaintools-solutions-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdomaintools-solutions-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdomaintools-solutions-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/domaintools-solutions-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdomaintools-solutions-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1082390}},{"tool":"search_jobs","arguments":{"company":"domaintools.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1082390},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}