Director of Forward Deployed Engineering

COMPANY OVERVIEW TENEX is an AI-native, automation-first, built-for-scale Managed Detection and Response (MDR) provider. We combine cutting-edge AI with human expertise to deliver security operations that are better, faster, and more cost-effective than traditional approaches. We're a fast-growing startup backed by industry experts and top-tier investors led by Crosspoint Capital. Our team is mission-driven, customer-obsessed, and building something that matters — a new standard for how security operations should work. Culture is one of the most important things at TENEX.AI http://TENEX.AI — explore our culture deck at culture.tenex.ai http://culture.tenex.ai to witness how we embody our values every day. This role is perfect for those already in the Scottsdale, AZ, Sarasota, FL or Kansas City, MO metro area, or eager to join us. Immerse yourself in a high-performance environment built on integrity, innovation, and a relentless drive to protect our customers. ABOUT THE ROLE TENEX.AI http://TENEX.AI is the AI-native, human-led MDR provider. This Director owns the foundational delivery of our MDR service: how we build, deploy, manage, and integrate the platforms our service runs on: Google SecOps, Microsoft Sentinel, and the Tenex Platform. The mandate is time-to-protection and repeatable, high-quality multi-SIEM delivery at scale, standing platforms up cleanly, wiring in the customer's data and tooling, operationalizing detection content and context, and keeping it all running well across the portfolio. This is an engineering leadership role, not an advisory or product-building one. The team implements and manages the platforms and works closely with the teams that deliver advisory engagements and develop agentic use cases; deploying and integrating what they produce and relaying field context back to them. WHAT YOU'LL DO - Own time-to-protection across our supported platforms — the speed and repeatability of standing up Google SecOps, Microsoft Sentinel, and the Tenex Platform in customer environments for example. - Lead multi-SIEM engineering — build, deploy, and manage pipelines, parsers, detections, playbooks and other configuration across Google SecOps, Microsoft Sentinel, and the Tenex Platform. - Own integrations — data-source onboarding, connector/API work, and normalization that wire the customer's environment and security tooling into the SIEMs and the Tenex Platform; build integration patterns that get reused, not rebuilt. - Own context engineering — the data mappings, entity resolution, tuning, and environment knowledge that make the platforms actually perform per customer. - Own ongoing platform management — health, optimization, and lifecycle of deployed platforms across the book of business. - Build the repeatable delivery machine — playbooks, intake, quality gates, and a capacity model that let the team scale against pipeline instead of heroics. - Lead and scale the team — hire, coach, and develop the engineers responsible for platform implementation, content, and integration; manage capacity against the customer pipeline; own delivery quality, SLOs, and OKRs. - Run the cross-team interfaces — partner with customer success, product management, threat intelligence, and cyber defense across the delivery lifecycle, and maintain clean support/relay channels with the advisory and agentic engineering functions. WHAT YOU BRING Must-have - 8+ years in security engineering, security operations, or detection engineering, with 3+ years managing engineers (ideally managing leads/managers). - Hands-on depth across both major SIEMs: Google SecOps (Chronicle — ingestion, parsers/CBN, YARA-L, entity graph) and Microsoft Sentinel (KQL, analytics rules, data connectors, Log Analytics) — or deep in one and strongly credible in the other, with clear ability to lead both. - Integration engineering — data-source onboarding, connector/API development, and normalization across platforms. - Demonstrated track record building repeatable…