Senior Detection and Response Engineer

About the role

Anyscale is a company dedicated to making distributed computing accessible to all developers through the commercialization of Ray, an open-source project for scalable machine learning. Anyscale is expanding rapidly and needs a Senior Detection and Response Engineer to manage detection engineering and coordinate incident responses.

Responsibilities

• Own and build detection coverage across cloud, endpoint, and runtime telemetry.
• Own a centralized correlation and alerting capability that transforms telemetry into actionable detections.
• Own incident response: runbooks, escalation paths, and coordination during incidents across corporate and production environments.
• Drive detection of anomalous activity across cloud, endpoint, and runtime telemetry, including Kubernetes.
• Tune detections to maintain a high signal-to-noise ratio and measure detection and response performance metrics such as Mean Time to Detect and Respond.
• Run incident retrospectives and incorporate lessons learned into detections and controls.
• Partner with infrastructure security and IT teams to address gaps identified during response.

Requirements

• 6+ years of experience in security, with a strong focus on detection engineering and incident response, preferably at a high-growth startup.
• Hands-on experience building detections and correlation across cloud (AWS, Azure), endpoint (EDR), and potentially container and runtime telemetry.
• Experience managing incident response end-to-end, including leading during live incidents.
• Ability to build and scale a detection and response capability, not just operate an existing one.
• Sound judgment and clear communication skills under pressure during incidents.
• Fluency in working with engineers and IT teams to identify and address gaps in response.

Qualifications

• Experience with SIEM or detection platforms and detection-as-code approaches.
• Familiarity with runtime security tools such as Upwind or similar.
• Background in AI or ML platforms or distributed systems.