# Security Engineer, Detection & Response

**Company:** [Scale AI](https://hotfix.jobs/companies/scale-ai)
**Location:** New York, NY, San Francisco, CA, Seattle, WA, Washington, DC
**Role:** Security Engineering
**Salary:** $238k – $297k/yr
**Experience:** 5+ years
**Skills:** Python, Go, SIEM, Edr, Soar, AWS, GCP, Azure, Digital Forensics, Malware Analysis
**Posted:** 2026-06-16

> Senior Security Engineer focused on building detection systems, incident response automation, and maturing telemetry pipelines across cloud environments. Requires 5+ years in detection engineering or security operations and production-grade coding skills.

## Job Description

## Responsibilities
- Engineer, test, and deploy detection logic across cloud and enterprise environments, treating detections as software with version control, peer review, and measurable performance.
- Build and maintain incident response automation, runbooks, and tooling that reduce containment timelines without sacrificing developer velocity.
- Mature telemetry pipelines through improved schema design, normalization, enrichment, and quality checks that reduce false positives and increase signal fidelity.
- Perform digital incident investigations to identify and contain potential security breaches.
- Conduct digital forensics and malware analysis to understand attack vectors and adversary methodologies.
- Integrate alerting with messaging and ticketing systems to enable fast, traceable response workflows.
- Partner cross-functionally with IT, security, and engineering teams to harden identity and access patterns, close logging and forensics gaps, and implement maintainable guardrails that scale with the organization.
- Utilize threat intelligence platforms to improve hunting, detection, and response workflows.
- Clearly explain the significance and impact of incidents, providing actionable recommendations to both technical and non-technical stakeholders.

## Requirements
- 5+ years of experience in Detection Engineering, Incident Response, or Security Operations, with a strong emphasis on building and shipping security tooling and automation.
- Proficiency in at least one programming language (e.g., Python, Go) and comfort writing production-grade code.
- Hands-on experience designing or improving detection pipelines, SIEM content, and alerting workflows in cloud-native environments.
- Practical experience with SIEM, EDR, and SOAR tools, with a preference for candidates who have built integrations or extended these platforms programmatically.
- Strong understanding of modern cyber threats, common attack techniques, and adversary TTPs.
- Familiarity with digital forensics tools and malware analysis techniques.
- Experience with cloud-native environments (e.g., AWS, GCP, Azure) and the security telemetry those environments generate.
- Exposure to threat intelligence platforms and integrating intel into detection and investigation workflows.
- Strong communication skills, with the ability to translate complex security findings into clear business impact.

## Nice-to-Haves
- Relevant security certifications (e.g., GCIH, GCFA, GCIA, CISSP, GDSA).

## Similar roles

- [Security Engineer, Infrastructure](https://hotfix.jobs/jobs/50525415-b271-43ec-80ab-bfdaaec54a2b) - Scale AI - San Francisco, CA - $238k – $297k/yr
- [Technical Threat Investigator, Threat Intel Engineering](https://hotfix.jobs/jobs/88a57973-f0ed-4382-af9a-a8c83c0461b5) - OpenAI - Remote - $234k – $385k/yr
- [Application Security Engineer](https://hotfix.jobs/jobs/654d17d4-a8c2-4d1a-88e8-1de0082654bc) - Retool - San Francisco, CA - $232k – $318k/yr
- [Technical Abuse Investigator](https://hotfix.jobs/jobs/83352ea4-ce7a-47a1-ab2e-f85293019e1e) - OpenAI - San Francisco, CA - $230k – $425k/yr
- [Safeguards Enforcement Analyst, Account Takeover & Credential Abuse](https://hotfix.jobs/jobs/31f5d0ec-9b31-4419-a4b1-2e826ec7a358) - Anthropic - San Francisco, CA - $245k – $285k/yr

**Apply:** https://hotfix.jobs/jobs/f9c29ac7-c370-4fa3-a943-0dadcf763dae
**Canonical:** https://hotfix.jobs/jobs/f9c29ac7-c370-4fa3-a943-0dadcf763dae