AI Security Engineer, Detection and Response

Role overview Build AI-supported security operations that automate routine alert handling while strengthening detection and response across endpoint, cloud, identity, and SaaS environments. The role combines hands-on agent development and threat hunting with leadership of incident investigations from initial detection through recovery and review.

Responsibilities - Design and deploy AI agents and automations for alert triage, incident enrichment, detection engineering, and approved response actions. - Use AI-assisted threat hunting to find visibility gaps and develop new detection capabilities. - Lead incident response through containment, eradication, recovery, and post-incident reviews, coordinating with technical teams and external security operations partners. - Investigate security events and perform digital forensics across endpoint, cloud, identity, and SaaS systems.

Requirements - At least five years of cybersecurity experience focused on security operations, detection engineering, and incident response. - Demonstrated leadership of incident investigations and digital forensics. - Hands-on experience writing and tuning detections in security tools. - Experience building or integrating end-to-end AI agents or LLM-based security operations solutions, such as alert investigation or automated response. - Python scripting and automation skills, plus experience with cloud environments and infrastructure as code. - Strong prioritization, composure under pressure, and communication skills, including the ability to explain technical findings clearly.

Benefits and work setup US-based remote role, with a preference for East Coast candidates; hybrid or office work is available in select California locations. Compensation includes regional base-pay ranges of $127,500–$178,000, depending on location, along with equity. Benefits include health, dental, vision, and mental health coverage; paid time off, holidays, wellness time, sick leave, and parental leave.