Varonis MDR delivers 24x7x365 managed detection and response services, protecting customer data through advanced detection, investigation, and response at scale.
You'll be joining our MDR Security Engineering team, whose mission is to help MDR scale, automate, and strengthen threat detection across a high-volume, global operation.
We are seeking a Senior Security Engineer, MDR Automation & Platform to serve as the engineering and development technical lead for our automation and orchestration platform. This role sits between engineering and security operations and will set the platform’s technical direction, translate operational and security needs into technical designs, and lead decisions around architecture, scalability, reliability, and cost.
You will not develop the underlying product or build the infrastructure from scratch. Instead, you will understand the platform deeply, shape how it is designed and operated, and build or review the code behind its more complex integrations and workflow components. You will work closely with analysts, researchers, and engineers to ensure security-driven workflows for triage, enrichment, investigation, and response are scalable, reliable, and built according to strong engineering standards.
The ideal candidate combines strong engineering and development experience with a solid understanding of security operations. They have led the technical direction of an automation platform or similar system and can turn complex operational requirements into practical, scalable solutions.
Responsibilities
- Drive the technical direction, architecture, and lifecycle of MDR’s automation and orchestration platform, including SOAR, case management, integrations, and supporting workflow tooling
- Act as the engineering and development technical lead for the MDR Security Engineering team by reviewing designs and code, setting standards, and guiding technical decisions
- Design and build complex integrations, services, APIs, and workflow components, while guiding others in building and maintaining the broader platform
- Translate operational and security needs into clear technical designs and delivery plans in collaboration with analysts, IR, threat hunters, researchers, and engineering
- Make architecture, scalability, reliability, design, and cost decisions for the platform
- Design and shape SOAR playbooks and security-driven workflows for alert triage, enrichment, investigation, and response
- Identify high-impact, high-volume SOC processes and scale them through automation
- Establish strong engineering practices across version control, code review, testing, CI/CD, deployment, and observability
Requirements
- 7+ years in engineering oriented roles, such as software engineering, platform engineering, infrastructure, automation, DevOps, or engineering-focused security roles
- Strong development skills, with the ability to design, build, and review non-trivial services, APIs, integrations, and automation components
- Demonstrated technical leadership over a platform or system, including responsibility for its design, architecture, and technical direction
- 2+ years of hands-on experience with SOAR platforms and security automation,
- Strong understanding of system design, architecture, scalability, reliability, and cost tradeoffs
- Solid understanding of SOC operations, alert triage, escalation workflows, and incident response
- Experience with enterprise security technologies, including SIEM, SOAR, EDR/XDR, IAM/AD, and ticketing systems
- Strong problem-solving skills and the ability to translate complex security and operational workflows into scalable automation
- Excellent communication and collaboration across engineering, security operations, and research teams
Nice to Have
- Experience in high-volume MDR or SOC environments
- Familiarity with threat hunting or detection engineering
What Success Looks Like
- A well-architected, scalable automation and orchestration platform that MDR operations can rely on 24/7
- A higher engineering standard across the team’s designs, code, and delivery processes
- Increased automation coverage and reduced analyst workload on high-impact workflows
- Improved consistency and quality of incident response
- Stable, reliable, and cost-efficient automation at scale
Skills Required
- 7+ years in engineering-oriented roles such as software engineering, platform engineering, infrastructure, automation, DevOps, or engineering-focused security
- Strong development skills designing, building, and reviewing services, APIs, integrations, and automation components
- Technical leadership experience over a platform or system, including design, architecture, and technical direction
- 2+ years of hands-on experience with SOAR platforms and security automation
- Strong understanding of system design, architecture, scalability, reliability, and cost tradeoffs
- Understanding of SOC operations, alert triage, escalation workflows, and incident response
- Experience with SIEM, SOAR, EDR/XDR, IAM/AD, and ticketing systems
- Strong problem-solving skills and ability to translate complex workflows into scalable automation
- Excellent communication and collaboration across engineering, security operations, and research teams
- Experience in high-volume MDR or SOC environments
- Familiarity with threat hunting or detection engineering
Varonis Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Varonis and has not been reviewed or approved by Varonis.
-
Healthcare Strength — Healthcare coverage is positioned as comprehensive, including medical, dental, and vision options that start immediately in some locations. The package is frequently characterized as a strong part of the overall rewards offering alongside other core benefits.
-
Retirement Support — Retirement benefits include a 401(k) with company matching (or a pension plan by region), which strengthens the long-term value of the package. Participation is complemented by additional ownership programs that increase total-rewards attractiveness.
-
Equity Value & Accessibility — Equity-related rewards such as stock options and an employee stock purchase plan (ESPP) are a notable part of the total compensation mix. These elements are often cited as helping offset middling perceptions of base pay, especially where equity participation is accessible.
Varonis Insights
What We Do
Varonis is a pioneer in data security and analytics, fighting a different battle than conventional cybersecurity companies. Varonis focuses on protecting enterprise data on premises and in the cloud: sensitive files and emails; confidential customer, patient and employee data; financial records; strategic and product plans; and other intellectual property. The Varonis Data Security Platform detects insider threats and cyberattacks by analyzing data, account activity, perimeter telemetry, and user behavior; prevents and limits disaster by discovering, classifying and locking down sensitive, regulated and stale data; and efficiently sustains a secure state with automation. With a focus on data security, Varonis serves a variety of use cases including data protection, threat detection and response, and compliance. Varonis started operations in 2005 and, as of December 31, 2018, had approximately 6,600 customers worldwide — comprised of industry leaders in many sectors including technology, consumer, retail, financial services, healthcare, manufacturing, energy, media, and education.
