Staff Detection Engineer

Responsibilities

• Build the detection engineering function, including telemetry pipelines, detection content, alert routing, and response runbooks.
• Own detection-as-code across cloud and endpoint sources with testing, version control, and CI workflows.
• Lead containment, root-cause analysis, and postmortems for high-severity security incidents.
• Automate alert triage and enrichment using Python or similar scripting technologies.
• Partner with leadership on security strategy, threat modeling, detection gaps, and roadmap prioritization.
• Work with corporate IT and infrastructure teams to obtain telemetry, logging, and access and address underlying security issues.

Requirements

• 8+ years of experience in security operations, detection engineering, or incident response.
• Experience building or scaling a detection engineering function, including its program, pipeline, and security coverage.
• Deep hands-on experience writing detections against AWS, GCP, or Azure control-plane and audit logs and endpoint telemetry.
• Strong Python or similar scripting and automation skills for building and maintaining detection-as-code pipelines.
• Incident response experience at significant scale, including leading response under pressure and driving operational improvements through postmortems.
• Ability to operate as a technical lead by setting direction, making decisions, and contributing hands-on without heavy management overhead.
• Ability to collaborate effectively with corporate IT and infrastructure teams in a fast-moving environment.
• Preferred experience securing GPU clusters, HPC environments, or physical data center infrastructure, or contributing to Sigma and community detection content.

Benefits

• Fluidstack states its commitment to pay equity and transparency.
• Fluidstack is an Equal Employment Opportunity Employer.