Security engineer, detection and response

Responsibilities

• Design and implement detections for AI-specific threats across distributed infrastructure.
• Build automated response playbooks and orchestration workflows that contain and remediate threats.
• Coordinate security incident response, forensic investigations, and incident communications across technical and executive stakeholders.
• Proactively hunt for sophisticated threats across GPU clusters, training infrastructure, and inference endpoints.
• Build detection-as-code frameworks, onboard telemetry, and create dashboards for model security and infrastructure activity.
• Translate AI security research into production detections and collaborate with Cloud Infrastructure, Software Security Engineering, and AI research teams.
• Participate in a 24/7 on-call rotation for critical AI security incidents.

Requirements

• 3–5+ years of experience in security operations, detection engineering, or incident response, particularly with AI/ML infrastructure, high-performance computing, or distributed systems.
• Strong programming skills in Python, KQL, SPL, or similar languages for detection logic, response automation, and security tooling.
• Experience with SIEM platforms, detection technologies, and forensic investigation techniques in complex distributed environments.
• Demonstrated ability to detect novel attack techniques, automate incident response, secure high-value intellectual property, and conduct proactive threat hunting.
• Ability to work across security, infrastructure, and AI research teams with strong ownership and self-directed execution.

Benefits

• Generous PTO and company holidays.
• Medical, dental, and vision coverage for employees and families.
• 16 weeks of paid parental leave for all parents.
• Fertility and family planning support.
• Early-detection cancer testing through Galleri.
• Flexible spending accounts, dependent FSA options, and eligible-plan HSA contributions.
• Annual wellness and learning and development stipends.
• Company-wide and team off-sites.
• Company stock options and 401(k).
• Role is based in the San Francisco or Seattle office and includes a 24/7 on-call rotation; benefits listed apply to US full-time employees.