We are seeking a highly skilled and motivated Detection & Response Engineer to join our Cyber Defense team. This role serves as the primary subject matter expert (SME) for security incidents involving our products and cloud environments. Working closely with Product Security, Engineering, IT, and Cloud teams, this position plays a key role in incident response, security improvements, and strengthening the organization's ability to detect, respond to, and mitigate cyber threats.
The ideal candidate brings strong technical expertise in incident response, security operations, product and cloud security, combined with a deep understanding of our products, architecture, and business processes. This individual will support complex investigations, drive security initiatives, and promote product security knowledge across the Cyber Defense team.
Responsibilities:
Serve as the primary SME and escalation point for security incidents involving our products and cloud environments.
Partner with Product Security, Engineering, IT, and Cloud teams to investigate incidents, drive remediation efforts, and improve security posture.
Maintain deep knowledge of our products, architecture, and platform changes to ensure investigation and detection readiness.
Identify and implement improvements to monitoring, detection capabilities, investigation workflows, and response processes.
Lead and support product and corporate security initiatives, ensuring security requirements are incorporated into new features, systems, and operational processes.
Mentor Cyber Defense team members and develop product-focused documentation, training materials, and operational best practices.
Requirements: 3+ years of experience in Detection Engineering, Incident Response, Product Security or Security Operations.
Strong understanding of network security, endpoint security, cloud security, identity security, and security operations.
Experience investigating and responding to security incidents in clouds, enterprise, or product environments.
Ability to understand complex system architectures and collaborate effectively with engineering and technical stakeholders.
Experience working with security technologies such as SIEM, EDR/XDR, SOAR, CSPM, vulnerability management, and threat intelligence platforms.
Experience working with Azure and/or AWS cloud environments.
Familiarity with detection engineering concepts and security monitoring methodologies.
Proficiency in leveraging AI tools to enhance day-to-day workflows.
Strong analytical, troubleshooting, and problem-solving skills.
Excellent written and verbal communication skills.
Ability to communicate technical concepts to both technical and non-technical audiences.
Self-motivated team player with the ability to collaborate across Security, Engineering, IT, and business teams.
Nice to Have:
Experience with Varonis products, including DatAdvantage, SaaS Platform, DSPM, and related product offerings.
Experience working closely with Engineering, Product Security, or Cloud Operations teams.
Hands-on experience with security automation, integrations, or SOAR playbooks.
Familiarity with threat hunting methodologies and detection engineering best practices.
This position is open to all candidates.