Senior Security Engineer, Detection & Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and manage detection capabilities across AWS, EDR, identity systems, SaaS, and the AI gateway.

• Take ownership of the security log pipeline as a product, providing centralized access to audit and security logs for triage, analysis, and incident response.

• Lead application protection detection efforts against account takeovers, credential stuffing, and abuse patterns.

• Create a triage layer for enrichment, correlation, containment, and evidence collection.

• Leverage LLM and agentic tools as appropriate, managing the verification layer.

• Acquire, develop, enhance, and deploy security tools and code within a repository.

• Broaden detection capabilities to encompass agentic AI products, addressing issues like prompt injection, tool-call abuse, and data exfiltration.

• Engage in the incident response lifecycle through a 24/7 on-call rotation.

• Manage technical detection controls necessary for compliance frameworks such as PCI DSS.

• Collaborate with platform and product teams to ensure services are launched with telemetry, threat models, and response playbooks.

⛳️ Requirements

• Over 5 years of experience on a security team supporting product/engineering functions, cloud infrastructure, and corporate infrastructure development.

• Proficiency in software engineering; experience with Python is preferred.

• An engineering mindset focused on building reliable and maintainable security infrastructure utilizing CI/CD software engineering practices.

• Familiarity with analytics and observability stacks such as Grafana, Looker, NewRelic, or similar tools.

• Practical experience with AWS and infrastructure-as-code tools like Terraform or CloudFormation.

• Working knowledge of EDR, SIEM, and SOAR platforms and their APIs.

• Hands-on experience with containers and Kubernetes, including detection and forensic analysis.

• Proven experience managing incidents from start to finish: alerting, diagnosis, resolution, and postmortem analysis.

• Exposure to LLM/agentic system security, including prompt injection, agent identity issues, and data exfiltration via AI systems.

• Daily, fluent use of AI-assisted coding/security tools with the ability to guide and verify AI-generated outputs.

• Strong written communication skills.

• Comfortable executing the technical aspects of compliance frameworks such as PCI or SOX is preferred.

• Applicants should be located in the eastern or central time zones to align with team working hours.

• Must be legally authorized to work in the United States.

🏝️ Benefits

• Competitive year-end performance bonus.

• Equity package.

• Comprehensive medical, dental, and vision coverage.

• Flexible vacation policy.

• Pet discount plans.

• Retirement plan with company match (401K).

• Opportunity to collaborate with sharp, motivated teammates on unique challenges.