Senior Cybersecurity Engineer

At Rearc, we're committed to empowering engineers to build awesome products and experiences. Success as a business hinges on our people's ability to think freely, challenge the status quo, and speak up about alternative problem-solving approaches. If you're driven by the desire to solve problems and make a difference, you're in the right place!

Our approach is simple: empower our people with the best tools possible to make an impact within their industry. We're on the lookout for people who thrive on ownership and freedom, possessing not just technical depth but also executive presence and business judgment.

Founded in 2016, we pride ourselves on fostering an environment where creativity flourishes, bureaucracy is minimal, and individuals are encouraged to challenge the status quo. We're not just a company; we're a community of problem-solvers dedicated to improving the lives of fellow software engineers and the customers we serve.

Role Overview

Rearc is seeking a Cybersecurity Threat Detection Engineer who is passionate about developing and evangelizing cybersecurity services. The ideal candidate will have strong communication skills, a solid foundation in DevSecOps and Detection-As-Code, deep purple team expertise, and an entrepreneurial spirit. Join our dynamic Cybersecurity practice to design and implement advanced detection strategies for our customers, supporting robust and modern cybersecurity monitoring programs. You will leverage SIEM, SOAR, EDR, and NDR services to build tailored security detections that strengthen our clients' defenses.

What You Bring

• Genuine enthusiasm for advancing services in the cybersecurity sector

• Solid fundamentals in cloud, security, SIEM, and data engineering

What You'll Do

• Utilize NDR, EDR, real-time streaming, and SIEM technologies to build resilient threat detection capabilities

• Develop and fine-tune detection rules informed by real-time data streaming, enhancing detection accuracy

• Design data enrichment pipelines and automated workflows to improve threat detection precision

• Create correlation logic and automated processes for generating high-fidelity threat alerts

• Ensure compliance and recoverability of customer data analytics solutions through SOPs, onboarding, normalization, enrichment, and system maintenance

• Develop automation playbooks for efficient incident triage and response

• Align detection content with customer-specific use case frameworks and report metrics on current cybersecurity threats

• Collaborate closely with customer cybersecurity teams to identify and close security gaps, enhancing enterprise security posture

• Build dashboards and data exploration tools to support Cybersecurity, IT, and OT teams

• Stay up to date on emerging cyber threats and trends, adapting detection strategies as the landscape evolves

• Work hand-in-hand with CSOC, OT, and Incident Response (IR) teams to ensure that detections are actionable and relevant

• Gather feedback to continually improve security frameworks and monitoring strategies

You will combine in-depth technical skills with a strong awareness of emerging threats, driving customer success and innovation in cybersecurity.

Qualifications

• 5–8 years of experience in Cybersecurity, with emphasis on:

  • Log streaming

  • Cybersecurity data lakes and data warehousing

  • SOAR engineering

  • SIEM engineering, administration, architecture, and operations

  • Data science, statistical analysis, and threat detection development

  • Integration of IT, OT, and business applications into SIEM environments

• Bachelor’s degree in Management Information Systems, Computer Science, or a related field

• Strong drive to stay current with industry trends, best practices, and cyber tools

• Proven experience documenting, socializing, and operationalizing cybersecurity technologies and processes

• Programming proficiency in Python, SQL, and Apache Spark

• Deep understanding of common attack techniques and their real-world applications

• Demonstrated ability to work collaboratively across multidisciplinary teams

• Self-starter with a track record of thriving in fast-paced environments

• Excellent verbal and written technical communication skills

Nice to Have:

• Experience with platforms such as Databricks, Cribl, Tines, or other cybersecurity lakehouse providers

Rearc is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. All employment decisions at Rearc are based on business needs, job requirements, and individual qualifications.