Security Engineer, Detection & Response (AI)

Location: Hybrid in the San Francisco Bay Area or New York City, NY, with remote work available

Company

Builds AI-native operating systems for large, regulated institutions, powered by workflow-focused agents and a proprietary platform designed for security, customer control, and model flexibility.

What you will do

• Design, build, and maintain automation, playbooks, and systems for security triage, investigation, and incident response.
• Develop high-signal detections and integrate security telemetry across cloud and application environments.
• Lead cross-functional incident response across applications, cloud infrastructure, endpoints, identity, and internal services.
• Translate incident data and response metrics into secure-by-design improvements with product and infrastructure teams.
• Evaluate response procedures, improve integrations, and strengthen the security operating model.
• Participate in a regular on-call rotation for critical security incidents.

Requirements

• Demonstrated capability in security engineering, detection engineering, or incident response.
• Hands-on experience investigating security incidents or suspicious behavior in complex environments.
• Practical experience with EDR, SIEM, SOAR, log-management, or equivalent detection-and-response tooling.
• Ability to write code and build automation or detections using a relevant scripting or query language.
• Strong understanding of modern cloud infrastructure and SaaS security principles.
• Sound risk-based judgment, timely decision-making during incidents, and clear cross-functional communication.

Nice to have

• Experience building self-service security triage automation or AI-assisted response capabilities.
• Background in threat hunting, digital forensics, threat intelligence, or infrastructure-as-code security.
• Experience investigating security events in containerized or Kubernetes-based cloud environments.
• Experience translating incident trends into architectural improvements or working in fast-paced, high-growth startup environments.

Culture & Benefits

• Work on production deployments with measurable customer impact across government, insurance, health, and financial services.
• High autonomy to shape security tooling, workflows, metrics, and operating practices.
• Collaborate with engineering, infrastructure security, IT, and operational teams.
• Participate in an on-call rotation supporting rapid incident response and operational resilience.