Security Engineer, Detection and Response

Responsibilities

• Design, implement, and operate continuous security monitoring, triage, investigation, containment, and remediation across networks and infrastructure.
• Build, lead, hire, and mentor teams covering observability, detection and response, and threat intelligence.
• Establish incident playbooks, on-call and escalation paths, tabletop exercises, and continuous response improvements.
• Partner with Engineering, Product, and Infrastructure to ensure reliable, actionable telemetry and embedded detection capabilities.
• Develop a security program resilient to sophisticated adversaries, including use of Serval’s agents for security operations.

Requirements

• 10+ years of cybersecurity experience with deep expertise in detection engineering, incident response, and security operations.
• Experience building and leading detection and response, instrumentation/observability, and threat intelligence teams.
• Demonstrated leadership and continuous improvement of security programs, processes, and people.
• Exceptional written and verbal communication skills, calm incident leadership, and the ability to coordinate diverse stakeholders.
• Deep expertise in modern observability stacks and detection primitives, including SIEM, data lakes, EDR, cloud telemetry, and logging.
• Understanding of modern adversary tradecraft and experience translating it into detection strategies and response actions.
• Strong integrity, mission orientation, and passion for security detection and response in complex environments.

Benefits

• Opportunity to shape the success of Serval’s product and company.
• Opportunity to build a new AI product offering with an experienced team and leading investors.
• Growth opportunities in a rapidly scaling company.
• Culture emphasizing innovation, ownership, accountability, and fun.