Detection and Response Engineer

About The Company Braintrust is the agent observability platform. By actively applying intelligence to agent traces and automatically surfacing the most critical patterns, Braintrust gives teams the visibility to understand how agents behave in production and the tools to improve them. Teams at Notion, Stripe, Box, OpenAI, and Cloudflare use Braintrust to trace their agents, find the issues in their observability data, and run evals that tell them how to improve. About The Role We’re looking for a Detection and Response engineer to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, lead incident response, and stay ahead of the curve incorporating real-time threat intelligence. Have a big impact with a small team that has outsized capabilities. What you'll do Build security telemetry pipelines across cloud execution environments (ECS/K8s), CI/CD systems, identity systems, endpoints, and agentic workloadsContinuously improve detections for attacks, abuse, and anomalous behaviorOwn the alert pipeline end-to-end and keep signal-to-noise highLead incident response and participate in on-call: triage, scope, contain, and remediate incidents, then write postmortems that produce durable improvementsHunt proactively for threats and build the tooling for turning evidence into new detectionsBuild agents that triage alerts, enrich findings, gather evidence, and scope incidents, with human-in-the-loop controls and evals that keep the automation trustworthyRun vulnerability response, evaluating impact and driving remediation across our infrastructure Ideal candidate credentials Proficient in modern backend technologies and comfortable writing real code in Python, TypeScript, or GoAWS experience (IAM, VPC, KMS, GuardDuty, CloudTrail) and working fluency in at least one of Azure or GCPKubernetes detection experience: audit logs, runtime telemetry, and workload identityKnowledge of endpoint security (MacOS) and detection and response techniquesHands-on incident experience: you’ve been on call, led incidents, and written postmortemsStrong written and verbal communicationA clear point of view on AI/LLM security and hands-on experience defending relevant threatsBonus: prior experience with LLM red-teaming, agent sandbox research, or other AI-relevant security threat defense Benefits include Medical, dental, and vision insuranceDaily lunch, snacks, and beveragesFlexible time offCompetitive salary and equityWifi & cellphone stipend Equal opportunity Braintrust is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.