Security Engineer - Detection & Response

Job summary

Responsibilities

You'll be the hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and the services that host and execute agentic workloads.

• Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code.
• Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane.
• Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment.
• Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine…
• Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes.

What they're looking for

• 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response — and the software skills to build your way out…
• Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts.
• Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable…
• Detection and adversary expertise: The ability to model realistic attacker behavior, hunt across complex systems, test detection coverage, and distinguish meaningful signal from…
• Hands-on incident response: You've participated in on-call, led incidents, and written postmortems that changed how a team operates.

Tech stack

• LangGraph
• GCP
• AWS
• Kubernetes
• Python
• TypeScript
• Terraform