Staff Software Engineer, Detection & Response

Job summary

Responsibilities

We’re looking for a Senior / Staff Software Engineer, Detection & Response to design and own how we detect and respond to threats across our environment — the telemetry, the detections, the playbooks, and the on-call rotation.

• Design and build our detection and telemetry pipeline, including logging coverage, the detection stack, and the data that feeds it.
• Write high-signal detections mapped to the threats that matter most, starting with the paths that lead to a breach: identity, access, the cloud control plane, and data…
• Build and own incident response — playbooks, on-call, live response, and post-incident reviews that make us better each time.
• Partner with security and platform engineering to close telemetry gaps and instrument what isn’t yet visible.
• Set the bar for detection-as-code and a metrics-driven approach to response.

What they're looking for

• 6+ years in detection and response, including building detection capability and setting direction — not only operating an established one.
• Strong AWS-native detection depth (CloudTrail, GuardDuty, VPC/flow logs, and the broader ecosystem).
• A detection-as-code, engineering-first mindset.
• Calm, structured, and decisive in a live incident.
• Interest in detecting emerging AI/ML abuse and threat patterns.

Tech stack

• AWS