Staff Detection & Response Engineer

Responsibilities

• Design and build the detection and telemetry pipeline, including logging coverage, the detection stack, and the data that feeds it.
• Write high-signal detections mapped to priority threats, including identity, access, cloud control plane, and data exfiltration paths.
• Build and own incident response, including playbooks, on-call, live response, and post-incident reviews.
• Partner with security and platform engineering to close telemetry gaps and instrument previously unseen areas.
• Establish detection-as-code practices and a metrics-driven approach to response.
• Build detection for AI-specific abuse, threats, and novel attack patterns.
• Leverage AI to augment security operations.

Requirements

• 6+ years of experience in detection and response, including building detection capabilities and setting direction.
• Strong AWS-native detection experience, including CloudTrail, GuardDuty, VPC logs, flow logs, and the broader AWS ecosystem.
• Detection-as-code and engineering-first mindset.
• Calm, structured, and decisive incident response approach.
• Interest in detecting emerging AI/ML abuse and threat patterns.

Nice to Haves

• Experience with consumer products at scale.
• Experience as an early or founding detection hire.
• Exposure to AI/ML abuse or platform-abuse signals.

Compensation & Benefits

• $230,000–$330,000 annual compensation.
• Company equity package.
• 401(k) with 3% employer match and Roth 401(k).
• Medical, dental, and vision insurance, with PPO, HSA, and FSA options.
• 11 paid holidays, unlimited PTO, and sick time.
• 16 weeks of paid parental leave.
• Creative education stipend.
• Generous commuter allowance.
• In-office lunch five days per week.
• Applicants must be eligible to work in the US.
• The role requires working onsite at one of the company’s three offices.