Cyber Defense Platforms Staff Engineer

OverviewAs the Associate Director (Staff Engineer) for Cyber Defense Platforms, you will own the defense technology stack end-to-end: SIEM, SOAR, EDR, DLP, email security, and anti-phishing platforms, along with the detection content, automation, and tooling that make them effective. This is a senior individual contributor role with enterprise-wide impact: every alert triaged, threat detected, and incident contained across the company depends on the systems you build and operate.This is a hybrid position and will be primarily based in Cambridge, MA.ResponsibilitiesOwn the deployment, configuration, administration, and lifecycle of defense platforms including SIEM, SOAR, EDR, DLP, email security, and phishingDefine the platform roadmap: evaluate, deploy, integrate, and rationalize security technologies to maximize defensive coverage and operational efficiencyEngineer and maintain security data pipelines across the enterprise: log source onboarding, normalization, enrichment, retention, and cost managementOwn the detection content lifecycle end-to-end: development, testing, tuning, versioning, and retirement of rules and analytics across all platformsEstablish detection-as-code practices, including version control, peer review, CI/CD deployment, and automated validation of contentMap detection coverage to MITRE ATT&CK, identify gaps, and partner with threat intel, IR, and offensive security to convert findings into durable detectionsDesign and build SOAR playbooks and workflow automation that reduce manual analyst effort and accelerate triage and response, including automated handling of user-reported phishingBuild internal tooling, integrations, and APIs that connect security platforms to each other and to enterprise systemsSet the standards for how Cyber Defense builds, deploys, and operates its technology, and serve as the technical authority for the defense technology domainLead cross-functional technical initiatives across IT, infrastructure, and engineering teams, and mentor engineers and analysts across the broader teamQualifications8+ years of progressive experience in security engineering, security operations, or detection engineering, with demonstrated ownership of defense and security platformsDeep hands-on expertise architecting and administering: SIEM, SOAR, EDR, DLP, or email security and anti-phishing platformsStrong software engineering skills in a language commonly used for security automation (e.g., Python, Go, PowerShell), with experience building production-quality integrations and toolingProven experience building and managing detection content at scale, measured against frameworks like MITRE ATT&CKTrack record of delivering measurable operational improvements through automation, such as reduced response times or expanded capacity without added headcountAbility to operate autonomously in a build-from-zero environment and drive technical work across teams you don't manageExperience standing up or modernizing a security operations stack (SIEM migration, SOAR implementation, EDR rollout) from early maturityCloud security experience, particularly AWS-native security servicesExperience in regulated industries (pharma, biotech, healthcare, financial services)Relevant certifications (e.g., GIAC GCDA/GDAT/GCIA, CISSP) or equivalent expertise#LI-MH1 #LI-Hybrid U.S. Pay Range$174,300.00 - $235,700.00The pay range reflects the full-time base salary range we expect to pay for this role at the time of posting. Base pay will be determined based on a number of factors including, but not limited to, relevant experience, skills, and education. This role is eligible for an annual short-term incentive award (e.g., bonus or sales incentive) and an annual long-term incentive award (e.g., equity).Alnylam’s robust Total Rewards package is designed to support your overall health and well-being. We offer comprehensive benefits including medical, dental, and vision coverage, life and disability insurance, a lifestyle reimbursement program, flexible spending and health savings accounts and a 401(k)with a generous company match. Eligible employees enjoy paid time off, wellness days, holidays, and two company-wide recharge breaks. We also offer generous family resources and leave. Our commitment to your well-being reflects our belief that caring for our people fuels the impact we create together.Learn more about these and additional benefits offered by Alnylam by visiting the Benefits section of the Careers website: About AlnylamWe are the leader in RNAi therapeutics – a revolutionary approach with the potential to transform the lives of people with rare and common diseases. Built on Nobel Prize-winning science, Alnylam has delivered the breakthroughs that made RNAi therapeutics possible and are just at the beginning of what’s possible. Our deep pipeline, late-stage programs, and bold vision reflect our core values: fierce innovation, passion for excellence, purposeful urgency, open culture and commitment to people. We're proud to be a globally recognized top employer, where an authentic, inclusive culture and breakthrough thinking fuel one another.At Alnylam, we commit to an inclusive recruitment process and equal employment opportunity. Qualified applicants will receive consideration for employment without regard to their sex, gender or gender identity, sexual orientation, race, color, ethnicity, national origin, ancestry, citizenship, religion, creed, physical or mental disability, pregnancy status or related conditions, genetic information, veteran or military status, marital or familial status, political affiliation, age, or any other factor protected by federal, state, or local law. Alnylam is an E-Verify Employer.This role is considered::HybridDepartment:Information Technology