Threat Detection Engineer (AI)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Threat Detection Engineer (AI): Building the detection engineering and incident response program from scratch for a clinical AI platform with an accent on cloud security, agentic workflows, and HIPAA compliance. Focus on architecting detection pipelines, automating security tooling, and defending novel threat surfaces in a high-stakes healthcare environment.
Location: Hybrid in San Francisco (3x/week)
Salary: $200,000–$250,000
Company
builds AI intelligence platforms that restore humanity to healthcare by reducing administrative burdens for health systems.
What you will do
- Build and manage a full-lifecycle detection pipeline across AWS, Kubernetes, and SaaS environments.
- Establish an end-to-end incident response program, including playbooks, post-mortems, and escalation procedures.
- Develop internal security tooling and automation, utilizing LLMs to accelerate detection and investigation.
- Define security strategies for clinical AI agents, focusing on credential abuse, data exfiltration, and abnormal tool access.
- Collaborate with engineering leadership to maintain high-signal alerting and operational security.
Requirements
- 5+ years of experience in detection engineering or incident response.
- Strong programming proficiency in Python, Go, or Rust.
- Deep experience with AWS security services and Kubernetes infrastructure.
- Proven ability to build or mature a detection engineering program from the ground up.
- Must be able to work in a hybrid capacity from the San Francisco office.
- Strong understanding of attacker tradecraft and infrastructure security.
Nice to have
- Experience with LLM security or agent-based workflow protection.
- Background in building security programs at early-stage startups.
- Contributions to open-source security projects or published security research.
Culture & Benefits
- Comprehensive medical, dental, and vision insurance coverage.
- 401(k) retirement plan with a 3% company match.
- Hybrid work-friendly culture with full home office equipment provisioning.
- Generous, flexible time off with no annual cap.
- Company-wide annual off-sites and regular team gatherings.
- Supportive environment with focus on continuous growth and high-ownership impact.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →