Detection and Response Engineer (AI Security)

Location: On-site in San Francisco, CA or New York, NY

Annual salary: $180,000–$240,000 USD

Company

LangChain builds open-source frameworks and the LangSmith platform for building, evaluating, deploying, and operating AI agents at scale.

What you will do

• Own the detection lifecycle by translating threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code.
• Design and operate security telemetry pipelines across GCP or AWS, Kubernetes, and the LangSmith/LangGraph control plane.
• Build investigation and threat-hunting tools for evidence collection, incident scoping, containment, and proactive detection improvement.
• Develop reliable internal AI agents and automation for alert triage, evidence gathering, incident scoping, and routine security operations.
• Lead incident response, participate in an on-call rotation, and drive postmortems that result in durable engineering changes.
• Partner with Product Security to convert threat models and vulnerability findings into production monitoring and secure design improvements.

Requirements

• 5+ years of experience in security engineering, detection engineering, security operations, or incident response.
• Strong production software engineering skills in Python or Go; TypeScript is a plus.
• Hands-on experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and actionable detections.
• Ability to model attacker behavior, conduct threat hunting, test detection coverage, and distinguish meaningful signals from noise.
• Experience participating in on-call rotations, leading incidents, and writing impactful postmortems.
• Experience building reliable automation or developer-facing systems, including APIs, workflows, instrumentation, quality evaluation, and production operations.

Nice to have

• Experience building or operating AI agents for security workflows and proficiency with AI tooling for security investigations.
• Understanding of AI threats, adversarial testing, and security boundaries for LLM and agent workloads.
• Exposure to SOC 2 or ISO 27001 monitoring and evidence automation.
• Experience with infrastructure as code such as Terraform or Helm.
• Experience securing SaaS, self-hosted, or air-gapped deployments.

Culture & Benefits

• Meaningful equity and compensation that may include variable pay depending on the role.
• Medical, dental, and vision coverage in the US.
• Flexible vacation and a 401(k) plan.
• Meals provided on in-office days in the US.
• Work on open-source and commercial products supporting production AI agents.