Staff Detection Engineer

How We Operate

Extreme ownership. Full autonomy. Own things end to end often taking on scope outside your core role without being asked to get things done.

Velocity. We drive everything forward as fast as possible.

First principles. Challenge every assumption. Zero analogy thinking, no egos, the best idea wins.

Love of the game. The frontier of AI is the most interesting problem of our time. We put in long hours at high intensity to push the frontier forward.

Role Scope

Lead detection engineering for Fluidstack's IT surface, including cross-domain detections where IT bridges OT or physical surfaces.

• Author and tune production detections as code, with peer review, CI/CD, and measured precision and recall.
• Apply AI and machine learning to build detections, including behavioral analytics and anomaly detection at scale.
• Develop novel detection tooling, including agentic capabilities that use LLMs for triage, investigation, and response.
• Set the engineering standards, coverage methodology, and quality metrics for the detection engineering discipline.
• Conduct threat and security research that informs detection logic and surfaces coverage gaps, and partner with platform engineers, IR, and threat intel to close the detection-to-response loop.

What We're Looking For

• You've built and tuned production detections as code, measured by precision and recall, not alert volume.
• You work fluently across SIEM, EDR, and cloud/IT telemetry, and you've engineered detection pipelines with CI/CD and peer review.
• You've applied ML or behavioral analytics to detection at scale, and you're fluent with LLM-based tooling for triage and investigation.
• You set standards others inherit. You've defined coverage methodology and quality metrics for a detection function, or you're ready to.
• You do threat research that drives new detections, and you close the loop with incident response and threat intelligence.

Bonus: Detection-as-code frameworks (Sigma, Panther). OT or physical-surface detection. Agentic/LLM security tooling. Building a detection function from the ground up.

Salary & Benefits

• Competitive total compensation package (salary + equity)
• Retirement or pension plan, in line with local norms
• Health, dental, and vision insurance
• Generous PTO policy, in line with local norms

The base salary range for this position is $250,000 - $330,000 per year, depending on experience, skills, qualifications, and location. This range represents our good faith estimate of the compensation for this role at the time of posting. Total compensation may also include equity in the form of stock options.

We are committed to pay equity and transparency.

Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law.

Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

You will receive a confirmation email once your application has successfully been accepted. If there is an error with your submission and you did not receive a confirmation email, please email careers@fluidstack.io with your resume/CV, the role you've applied for, and the date you submitted your application-- someone from our recruiting team will be in touch.

Career Range: $250K - $350K