Detection & Response Engineer
Core
Build and run detection engineering, threat intelligence, and incident response capabilities for a global AI cloud platform.
Role type
Senior Detection & Response Engineer (Security)
Builds
End-to-end Security Incident Response program, detection pipelines, and security observability tools for cloud infrastructure.
Domain
Cloud Security / AI Infrastructure
Deliverable
production ML models
Required skills
Detection engineering, SIEM rule tuning, SQL, SOAR workflow automation, memory forensics, log analysis, network traffic analysis, threat intelligence frameworks, stakeholder management
Preferred skills
AI/ML and GPU cluster threat knowledge, eBPF-based detection, threat hunting
Technologies
Kubernetes, Linux, Chronicle, Splunk, Elastic, Golang, Temporal, Falco, Tetragon
Responsibilities
Maintain low false-positive/false-negative rates in detections; architect detection coverage across cloud and bare-metal; build internal D&R tools and automate response runbooks; lead incident response end-to-end including containment and root cause analysis; define and report on D&R metrics; build and maintain the Security Incident Response program.
Seniority
Senior, hands-on IC
