TENEX.AI
Forward Deployed Data Engineer
Kansas City, MO SOC +2 · Hybrid · Full-time · Posted Jun 1, 2026
- Location
- Kansas City, MO SOC
Sarasota, FL HQ
Scottsdale, AZ - Experience
- 3+ years in detection engineering, content engineering, or security operations.
- Education
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field (or equivalent practical experience).
About the job
Build and maintain SIEM/SOAR detection content and integrations for TENEX’s MDR platform, while providing advanced technical training to customers.
What you'll do
- Create and maintain detection rules, log parsers, SOAR playbooks, dashboards, scripts, and API integrations.
- Identify detection coverage gaps and incorporate threat intelligence and MITRE ATT&CK TTPs into detection logic.
- Prepare customers to use detection content and platform capabilities; document content and support AI-assisted content generation with human review.
What they ask for
- 3+ years in detection engineering, content engineering, or security operations.
- Strong proficiency in SIEM detection rule development, such as YARA-L for Google SecOps or KQL for Sentinel.
- Experience building and maintaining SOAR playbooks and automation workflows, and developing log parsers.
- Experience with Python, cloud run functions, REST API integrations, and security dashboards; knowledge of MITRE ATT&CK and threat intelligence.
Nice to have
- Relevant certifications such as CISSP, CISM, GIAC certifications, Google Cloud Professional, Microsoft SC-200/AZ-500, or AWS Certified Solutions Architect.
Tools
Google SecOps, Microsoft Sentinel, YARA-L, KQL, Python, REST API, MITRE ATT&CK
AI focus
Support AI-assisted content generation workflows, with human review as the quality gate.
Model-written summary · the original posting is authoritative