Staff Security Engineer - Detection and Response

What you'll do

• Shape the detection and response roadmap, identify detection gaps, and architect scalable SIEM, SOAR, and alerting systems.
• Lead response to high-impact security incidents and drive findings toward systemic remediation.
• Set technical and responsible-AI standards for detection workflows; guide architecture and mentor engineers.

What they ask for

• 8+ years in detection, security operations, incident response, or software engineering, with a track record leading cross-functional technical initiatives.
• Advanced proficiency in Python or another high-level language such as Kotlin or TypeScript; ability to build and rigorously validate AI/LLM-driven detection, triage, and investigation workflows.
• Expertise authoring detections mapped to attacker TTPs and building detection-as-code and alerting pipelines.
• Strong AWS knowledge, fluency with infrastructure-as-code and CI/CD, and strong written and verbal communication skills.

Nice to have

• History leading complex, high-impact incidents as a technical lead or incident commander.
• Hands-on design of AI agents or LLM-based security operations automation, or contributions to open-source detection/security tooling or published security research.

Pay

$205,000 - $256,000 USD (base salary)

Tools

Python, Kotlin, TypeScript, AWS, CloudTrail, VPC Flow Logs, GuardDuty, CloudWatch

AI focus

Engineer and validate AI/LLM-augmented detection, triage, investigation, and response pipelines; set responsible-use standards and human-in-the-loop guardrails.