Detection and Response Engineer
Braintrust is an active AI observability platform for teams building and operating production AI agents.
Funding history
About Braintrust
Braintrust provides tracing, evaluation, experimentation, and pattern-discovery tooling for AI agents. Teams can inspect agent traces, evaluate outputs with automated or human scoring, build datasets from production behavior, and gate releases against quality regressions.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will build security telemetry pipelines across cloud environments, CI/CD, identity systems, endpoints, and agentic workloads. You will improve detections, own the alert pipeline, lead incident response, hunt for threats, build alert-triage agents, and drive vulnerability remediation.
Requirements
- Proficiency in modern backend technologies and coding in Python, TypeScript, or Go
- AWS experience with IAM, VPC, KMS, GuardDuty, and CloudTrail
- Working fluency in Azure or GCP
- Kubernetes detection experience with audit logs, runtime telemetry, and workload identity
- Knowledge of macOS endpoint security and detection and response techniques
- Hands-on incident response and on-call experience
- Strong written and verbal communication
- A clear perspective on AI and LLM security and hands-on experience defending relevant threats
Responsibilities
- Build security telemetry pipelines across cloud execution environments, CI/CD systems, identity systems, endpoints, and agentic workloads
- Improve detections for attacks, abuse, and anomalous behavior
- Own the alert pipeline and maintain a high signal-to-noise ratio
- Lead incident response, including triage, scoping, containment, remediation, and postmortems
- Hunt proactively for threats and build tooling that converts evidence into detections
- Build agents that triage alerts, enrich findings, gather evidence, and scope incidents with human-in-the-loop controls and evaluations
- Evaluate vulnerability impact and drive remediation across infrastructure
Benefits
- Medical, dental, and vision insurance
- Daily lunch, snacks, and beverages
- Flexible time off
- Equity
- WiFi and cellphone stipend