Detection and Response Engineer
Core
Build security telemetry pipelines, improve attack detections, lead incident response, and hunt for threats across cloud, CI/CD, identity, and agentic workloads.
Role type
Senior Detection and Response Engineer (Cloud & AI Security)
Builds
Security telemetry pipelines, detection agents, and incident response tooling
Domain
Cloud Security, AI/LLM Security, Incident Response
Deliverable
production ML models
Required skills
Python, TypeScript, Go, AWS (IAM, VPC, KMS, GuardDuty, CloudTrail), Kubernetes detection, endpoint security (MacOS), incident leadership, threat hunting, AI/LLM security defense
Preferred skills
LLM red-teaming, agent sandbox research
Technologies
AWS, Azure, GCP, Kubernetes, Python, TypeScript, Go
Responsibilities
Build security telemetry pipelines across cloud execution environments, CI/CD systems, identity systems, endpoints, and agentic workloads; Continuously improve detections for attacks, abuse, and anomalous behavior; Own the alert pipeline end-to-end while maintaining a high signal-to-noise ratio; Lead incident response, participate in on-call, and triage, scope, contain, and remediate incidents; Write incident postmortems that drive durable security improvements; Proactively hunt for threats and build tooling that turns evidence into new detections; Build agents that triage alerts, enrich findings, gather evidence, and scope incidents with human-in-the-loop controls and evaluations; Run vulnerability response, evaluate impact, and drive remediation across infrastructure
