Braintrust
Detection and Response Engineer
San Francisco +2 · On-site · Full-time · Posted Oct 24, 2026
- Location
- San Francisco
New York City
Seattle
About the job
Designs and operates security detection, telemetry, and incident-response systems across Braintrust’s infrastructure and agent workloads.
What you'll do
- Build security telemetry pipelines, improve threat detections, and own the alert pipeline.
- Lead incident response, participate in on-call, and conduct proactive threat hunting and vulnerability response.
- Build agents to triage alerts, enrich findings, gather evidence, and scope incidents with human oversight and evaluations.
What they ask for
- Proficiency with backend technologies and writing code in Python, TypeScript, or Go.
- AWS experience and working fluency in at least one of Azure or GCP.
- Kubernetes detection experience, including audit logs, runtime telemetry, and workload identity.
- Hands-on incident experience, including on-call, leading incidents, and writing postmortems.
Nice to have
- Experience with LLM red-teaming, agent sandbox research, or other AI-relevant security threat defense.
Tools
Python, TypeScript, Go, AWS, Azure, GCP, ECS, Kubernetes
AI focus
Build agents for alert triage and incident investigation, with human-in-the-loop controls and evaluations; defend against AI/LLM security threats.
Model-written summary · the original posting is authoritative