Drimva

Hadrian

Tech Lead, Detection & Response

Los Angeles, CA +1 · On-site · Full-time · Posted Aug 6, 2026

Location
Los Angeles, CA
San Francisco Bay Area, CA
Experience
8+ years of security engineering experience.
Visa sponsorship
To conform to U.S. Government export regulations, including ITAR, candidates must be a U.S. citizen or national, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain required authorizations from the U.S. Department of State.

About the job

Leads hands-on design and implementation of Hadrian’s threat detection, investigation, and response capabilities across corporate, cloud, and factory environments.

What you'll do

  • Own detection and response strategy, architecture, and engineering; build an AI-native stack with detection-as-code, LLM-assisted triage, and agentic response automation.
  • Lead incident response from triage through containment, remediation, and postmortem, including high-severity incidents.
  • Set technical direction for a small team, mentor engineers, and partner with IT, infrastructure, and compliance on ITAR and CMMC requirements.

What they ask for

  • 8+ years of security engineering experience with hands-on detection and response expertise, including SIEM, EDR, cloud and identity telemetry, and SOAR.
  • Strong software engineering skills and fluency with detection-as-code and infrastructure-as-code.
  • Track record of setting technical direction as a tech lead, team lead, or anchor senior IC.
  • Demonstrated use of AI/LLM tooling in security workflows and experience leading production incident response end to end.

Nice to have

  • Red team, penetration testing, or adversary emulation experience; experience in ITAR, CMMC, or other regulated defense or government environments.
  • OT/ICS or manufacturing security exposure; production experience building agentic or LLM-based security automation; 0→1 security capability building at a fast-scaling startup.

Tools

SIEM, EDR, SOAR, detection-as-code, infrastructure-as-code, LLM

AI focus

Build an AI-native detection and response stack, including LLM-assisted triage and enrichment and agentic response automation; apply AI/LLM tooling to security workflows.

Model-written summary · the original posting is authoritative

First seen Oct 28, 2026 · Last verified Nov 4, 2026 (UTC)