Security Engineer, Detection & Response

Job summary

Responsibilities

We’re looking for a detection and response engineer to build how we find, investigate, and stop threats against our company, platforms, models, and data. You’ll own the pipelines that turn raw telemetry into high-fidelity detections, lead the response when real incidents happen, and run a threat…

• Lead incident response end-to-end: triage, scoping, containment, eradication, recovery, and blameless postmortems that turn lessons into new detections and controls.
• Design, build, and operate the security data pipelines and tooling that power detection and response: collecting, normalizing, enriching, and storing telemetry from cloud…
• Author, deploy, and maintain high-fidelity detections across SIEM, endpoint, cloud, and security tooling
• Build and run our threat intelligence practice: track actors and campaigns relevant to AI labs such as espionage, model weight theft, supply chain compromise, and credential…
• Proactively hunt for threats across our environment, and build automation and response tooling: enrichment, playbooks, automated containment that shortens time to detect and…

What they're looking for

• Bachelor’s degree or equivalent experience in computer science, engineering, or similar.
• Proficiency in Python or Rust for building data pipelines, detections, and internal tools.
• A track record responding to real security incidents in production environments, including leading investigations and coordinating across teams under pressure.
• Hands-on experience building and operating security data pipelines at scale: log ingestion, parsing and normalization, enrichment, and storage and query in a SIEM or data lake…
• Experience producing and consuming threat intelligence: tracking adversary TTPs, mapping them to frameworks like MITRE ATT&CK, and translating intel into detections and hunts.

Tech stack

• Kubernetes
• Python
• Rust
• BigQuery
• Snowflake
• AWS
• GCP
• Azure