MDR Security Engineer

Summary
Data has never been more valuable and vulnerable. As cybercriminals become more sophisticated and regulations more strict, organizations struggle to answer one key question: “Is my data safe?
"
At Varonis, we see the world of cybersecurity differently. Instead of chasing threats, we believe the most practical approach is protecting data from the inside out. We’ve built the industry’s first fully autonomous Data Security Platform to help our customers dramatically reduce risk with minimal human effor
t.
At Varonis, we move fast. We’re an ultra-collaborative company with brilliant people who care deeply about the details. Together, we’re solving interesting and complex puzzles to keep the world’s data sa
fe.
Position Overv
iew:
Varonis MDR delivers 24x7x365 managed detection and response services, protecting customer data through advanced detection, investigation, and response at s
cale.
We are seeking an MDR Security Engineer to own and scale the automation layer that powers our global MDR operations. This role is responsible for building and operating production-grade automation systems that reduce manual workload, improve detection quality, and enable consistent, high-quality incident res
ponse.
The ideal candidate is a hands-on engineer with strong experience in SOAR platforms, security operations, and automation design, capable of driving measurable improvements in efficiency, reliability, and response outcomes across a high-volume SOC envir
onment.
Location & Workin
g Model:
This is a fully remote position based in India. The role follows standard daytime business hours. As part of Varonis' global 24/7 MDDR service, analysts collaborate with teams across multiple regions and time zones to provide continuous customer
coverage.
Respon
sibilities
Upkeep the design, development, and lifecycle of SOAR playbooks, workflows, and integrations across the M
DR platformBuild and operate production-grade automation systems supporting alert triage, enrichment, investigation, a
nd responseDefine and drive automation strategy by identifying high-impact, high-volume SOC processes and scaling them through
automationDevelop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs an
d scriptingPartner with MDR analysts, IR, threat hunters, and engineering teams to translate operational workflows into scalable
automationImprove detection and response quality through automation of enrichment, investigation, and containmen
t workflowsContribute to incident response and RCAs by delivering tooling that improves investigation speed, accuracy, and
consistencyEvaluate and implement new automation capabilities, including AI-assisted workflows and data-driven
decisioning
Monitoring, Metrics & Reliabili
ty Ownership
Define and own automation KPI
s, including:Automation coverage (% of alerts handled
or augmented)MTTD / MTT
R improvementFalse positive reduction and signal-to-nois
e improvementAnalyst time saved and throug
hput increaseBuild and maintain dashboards and reporting to measure automation impact on SOC perform
ance and SLAsEnsure production reliability and stability of automation system
s, including:Monitoring workflow success/failure rates and exec
ution latencyTracking integration and API health, errors, and r
etry behaviorImplementing logging, alerting, and observability across automat
ion pipelinesContinuously optimize workflows based on data, feedback, and operational performance to ensure consistent 24/7
MDR operatio
n
Requirements
4+ years of experience in Security Operations, MDR, Incident Response, or Secur
ity Engineering2–3+ years of hands-on experience with SOAR platforms and secu
rity automationProven experience owning and operating production-grade automation workflows in a SOC/
MDR environmentStrong understanding of SOC operations, alert triage, escalation workflows, and in
cident responseExperience with enterprise security technologies (SIEM, SOAR, E
DR/XDR, IAM/AD)Strong scripting/development skills (Python, PowerShell, Bash) and experience building APIs a
nd integrationsExperience with CI/CD, version control (Git), and deploying auto
mation at scaleStrong analytical thinking and problem-solving skills with the ability to translate complex workflows
into automationExcellent communication and collaboration skills across engineering and o
perations te
ams
Nice to Have
Experience with AI-enhanced automation or large-scale workf
low orchestrationExperience in high-volume MDR
/SOC environmentsFamiliarity with threat hunting or dete
ction engineering
What
Success Looks Like
Increased automation coverage a
cross MDR workflowsMeasurable reduction in analyst workload
and response timesImproved consistency and quality o
f incident responseStable, reliable automation systems
operating at scale
We invite you to check out our Instagram Page to gain further insight into
the Varonis
culture!
@VaronisLife
Varonis is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally prot
ected characteristics.

Work arrangement
Yes