Staff Detection & Response Engineer

About the role

We’re looking for a Senior / Staff Detection & Response Engineer to design and own how we detect and respond to threats across our environment. This is a hands-on senior role for an engineer who wants to build detection and response the right way from the ground up and own it end to end.

What You’ll Do

• Design and build our detection and telemetry pipeline, including logging coverage, the detection stack, and the data that feeds it.
• Write high-signal detections mapped to the threats that matter most, starting with the paths that lead to a breach: identity, access, the cloud control plane, and data exfiltration.
• Build and own incident response — playbooks, on-call, live response, and post-incident reviews that make us better each time.
• Partner with security and platform engineering to close telemetry gaps and instrument what isn’t yet visible.
• Set the bar for detection-as-code and a metrics-driven approach to response.
• Build detection for AI-specific abuse and threats and novel attack patterns as they emerge.
• Leverage AI to augment yourself so you can focus on the critical work that only you can do.

What You’ll Need

• 6+ years in detection and response, including building detection capability and setting direction — not only operating an established one.
• A strong AWS-native detection depth (CloudTrail, GuardDuty, VPC/flow logs, and the broader ecosystem).
• A detection-as-code, engineering-first mindset.
• Calm, structured, and decisive in a live incident.
• An interest in detecting emerging AI/ML abuse and threat patterns.

Nice to have

• Consumer product at scale, experience as an early or founding detection hire, exposure to AI/ML abuse or platform-abuse signals.