Drimva

TENEX.AI

Forward Deployed Data Engineer

Kansas City, MO SOC +2 · Hybrid · Full-time · Posted Jun 1, 2026

Location
Kansas City, MO SOC
Sarasota, FL HQ
Scottsdale, AZ
Experience
3+ years in detection engineering, content engineering, or security operations.
Education
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field (or equivalent practical experience).

About the job

Build and maintain SIEM/SOAR detection content and integrations for TENEX’s MDR platform, while providing advanced technical training to customers.

What you'll do

  • Create and maintain detection rules, log parsers, SOAR playbooks, dashboards, scripts, and API integrations.
  • Identify detection coverage gaps and incorporate threat intelligence and MITRE ATT&CK TTPs into detection logic.
  • Prepare customers to use detection content and platform capabilities; document content and support AI-assisted content generation with human review.

What they ask for

  • 3+ years in detection engineering, content engineering, or security operations.
  • Strong proficiency in SIEM detection rule development, such as YARA-L for Google SecOps or KQL for Sentinel.
  • Experience building and maintaining SOAR playbooks and automation workflows, and developing log parsers.
  • Experience with Python, cloud run functions, REST API integrations, and security dashboards; knowledge of MITRE ATT&CK and threat intelligence.

Nice to have

  • Relevant certifications such as CISSP, CISM, GIAC certifications, Google Cloud Professional, Microsoft SC-200/AZ-500, or AWS Certified Solutions Architect.

Tools

Google SecOps, Microsoft Sentinel, YARA-L, KQL, Python, REST API, MITRE ATT&CK

AI focus

Support AI-assisted content generation workflows, with human review as the quality gate.

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 4, 2026 (UTC)