fal.ai
Security Engineer, Detection and Response
$180K–$250K
San Francisco · Full-time · Posted Apr 6, 2026
- Experience
- 5+ years in security engineering.
- Visa sponsorship
- Visa sponsorship is offered; relocation to San Francisco is supported.
About the job
Build and lead fal's detection and response program, including threat detection, incident response, and AI-driven security automation.
What you'll do
- Build logging and telemetry pipelines, develop detections, and lead threat hunting.
- Lead incidents and establish response plans, playbooks, severity models, and exercises.
- Set the D&R roadmap, measure program coverage and response metrics, and own audit controls and evidence.
What they ask for
- 5+ years in security engineering, with deep hands-on detection engineering and incident response experience.
- Experience leading incidents in cloud-native environments (AWS/GCP, Kubernetes, Linux).
- Hands-on experience with SIEM, EDR, and cloud security tooling.
- Daily use of LLMs, agents, and AI coding tools to build detections, automate investigations, and ship tooling.
Nice to have
- Specialization in GPU infrastructure, ML platforms, or multi-tenant compute.
- Experience with forensics, malware analysis, threat intelligence, detections-as-code, SOAR automation, or SOC 2 or ISO 27001 audits.
Pay
$180,000 - $250,000 USD base salary
Tools
LLMs, AWS/GCP, Kubernetes, Linux, SIEM, EDR, SOAR
AI focus
Use LLMs and agents for detection and response, including triage, enrichment, investigation, and alert correlation; use AI coding tools to build detections, automate investigations, and ship tooling.
Model-written summary · the original posting is authoritative