Senior Security Engineer
Description
Varonis MDR delivers 24x7x365 managed detection and response services, protecting customer data through advanced detection, investigation, and response at scale.
You'll be joining our MDR Security Engineering team, whose mission is to help MDR scale, automate, and strengthen threat detection across a high-volume, global operation.
We are seeking a Senior Security Engineer, MDR Automation & Platform to serve as the engineering and development technical lead for our automation and orchestration platform. This role sits between engineering and security operations and will set the platform’s technical direction, translate operational and security needs into technical designs, and lead decisions around architecture, scalability, reliability, and cost.
You will not develop the underlying product or build the infrastructure from scratch. Instead, you will understand the platform deeply, shape how it is designed and operated, and build or review the code behind its more complex integrations and workflow components. You will work closely with analysts, researchers, and engineers to ensure security-driven workflows for triage, enrichment, investigation, and response are scalable, reliable, and built according to strong engineering standards.
The ideal candidate combines strong engineering and development experience with a solid understanding of security operations. They have led the technical direction of an automation platform or similar system and can turn complex operational requirements into practical, scalable solutions.
Responsibilities
- Drive the technical direction, architecture, and lifecycle of MDR’s automation and orchestration platform, including SOAR, case management, integrations, and supporting workflow tooling
- Act as the engineering and development technical lead for the MDR Security Engineering team by reviewing designs and code, setting standards, and guiding technical decisions
- Design and build complex integrations, services, APIs, and workflow components, while guiding others in building and maintaining the broader platform
- Translate operational and security needs into clear technical designs and delivery plans in collaboration with analysts, IR, threat hunters, researchers, and engineering
- Make architecture, scalability, reliability, design, and cost decisions for the platform
- Design and shape SOAR playbooks and security-driven workflows for alert triage, enrichment, investigation, and response
- Identify high-impact, high-volume SOC processes and scale them through automation
- Establish strong engineering practices across version control, code review, testing, CI/CD, deployment, and observability
Requirements
- 7+ years in engineering oriented roles, such as software engineering, platform engineering, infrastructure, automation, DevOps, or engineering-focused security roles
- Strong development skills, with the ability to design, build, and review non-trivial services, APIs, integrations, and automation components
- Demonstrated technical leadership over a platform or system, including responsibility for its design, architecture, and technical direction
- 2+ years of hands-on experience with SOAR platforms and security automation,
- Strong understanding of system design, architecture, scalability, reliability, and cost tradeoffs
- Solid understanding of SOC operations, alert triage, escalation workflows, and incident response
- Experience with enterprise security technologies, including SIEM, SOAR, EDR/XDR, IAM/AD, and ticketing systems
- Strong problem-solving skills and the ability to translate complex security and operational workflows into scalable automation
- Excellent communication and collaboration across engineering, security operations, and research teams
Nice to Have
- Experience in high-volume MDR or SOC environments
- Familiarity with threat hunting or detection engineering
What Success Looks Like
- A well-architected, scalable automation and orchestration platform that MDR operations can rely on 24/7
- A higher engineering standard across the team’s designs, code, and delivery processes
- Increased automation coverage and reduced analyst workload on high-impact workflows
- Improved consistency and quality of incident response
- Stable, reliable, and cost-efficient automation at scale