MDR Security Engineer

Summary

Data has never been more valuable and vulnerable. As cybercriminals become more sophisticated and regulations more strict, organizations struggle to answer one key question: “Is my data safe?

"
At Varonis, we see the world of cybersecurity differently. Instead of chasing threats, we believe the most practical approach is protecting data from the inside out. We’ve built the industry’s first fully autonomous Data Security Platform to help our customers dramatically reduce risk with minimal human effor

t.
At Varonis, we move fast. We’re an ultra-collaborative company with brilliant people who care deeply about the details. Together, we’re solving interesting and complex puzzles to keep the world’s data sa

fe.
Position Overv

iew:
Varonis MDR delivers 24x7x365 managed detection and response services, protecting customer data through advanced detection, investigation, and response at s

cale.
We are seeking an MDR Security Engineer to own and scale the automation layer that powers our global MDR operations. This role is responsible for building and operating production-grade automation systems that reduce manual workload, improve detection quality, and enable consistent, high-quality incident res

ponse.
The ideal candidate is a hands-on engineer with strong experience in SOAR platforms, security operations, and automation design, capable of driving measurable improvements in efficiency, reliability, and response outcomes across a high-volume SOC envir

onment.
Location & Workin

g Model:
This is a fully remote position based in India. The role follows standard daytime business hours. As part of Varonis' global 24/7 MDDR service, analysts collaborate with teams across multiple regions and time zones to provide continuous customer

coverage.
Respon

• sibilities
  Upkeep the design, development, and lifecycle of SOAR playbooks, workflows, and integrations across the M
• DR platformBuild and operate production-grade automation systems supporting alert triage, enrichment, investigation, a
• nd responseDefine and drive automation strategy by identifying high-impact, high-volume SOC processes and scaling them through
• automationDevelop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs an
• d scriptingPartner with MDR analysts, IR, threat hunters, and engineering teams to translate operational workflows into scalable
• automationImprove detection and response quality through automation of enrichment, investigation, and containmen
• t workflowsContribute to incident response and RCAs by delivering tooling that improves investigation speed, accuracy, and
• consistencyEvaluate and implement new automation capabilities, including AI-assisted workflows and data-driven

decisioning
Monitoring, Metrics & Reliabili

• ty Ownership
  Define and own automation KPI
• s, including:Automation coverage (% of alerts handled
• or augmented)MTTD / MTT
• R improvementFalse positive reduction and signal-to-nois
• e improvementAnalyst time saved and throug
• hput increaseBuild and maintain dashboards and reporting to measure automation impact on SOC perform
• ance and SLAsEnsure production reliability and stability of automation system
• s, including:Monitoring workflow success/failure rates and exec
• ution latencyTracking integration and API health, errors, and r
• etry behaviorImplementing logging, alerting, and observability across automat
• ion pipelinesContinuously optimize workflows based on data, feedback, and operational performance to ensure consistent 24/7

MDR operatio

• n
  Requirements
  4+ years of experience in Security Operations, MDR, Incident Response, or Secur
• ity Engineering2–3+ years of hands-on experience with SOAR platforms and secu
• rity automationProven experience owning and operating production-grade automation workflows in a SOC/
• MDR environmentStrong understanding of SOC operations, alert triage, escalation workflows, and in
• cident responseExperience with enterprise security technologies (SIEM, SOAR, E
• DR/XDR, IAM/AD)Strong scripting/development skills (Python, PowerShell, Bash) and experience building APIs a
• nd integrationsExperience with CI/CD, version control (Git), and deploying auto
• mation at scaleStrong analytical thinking and problem-solving skills with the ability to translate complex workflows
• into automationExcellent communication and collaboration skills across engineering and o

perations te

• ams
  Nice to Have
  Experience with AI-enhanced automation or large-scale workf
• low orchestrationExperience in high-volume MDR
• /SOC environmentsFamiliarity with threat hunting or dete

ction engineering
What

• Success Looks Like
  Increased automation coverage a
• cross MDR workflowsMeasurable reduction in analyst workload
• and response timesImproved consistency and quality o
• f incident responseStable, reliable automation systems

operating at scale
We invite you to check out our Instagram Page to gain further insight into

the Varonis

culture!
@VaronisLife
Varonis is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally prot