Detection and Response Engineer
Modal Labs, Inc. operates Modal, a serverless cloud and AI infrastructure platform for developers running inference, training, batch processing, and isolated sandboxes.
Funding history
About Modal
Modal provides code-first, elastic CPU/GPU compute infrastructure for AI workloads, including model inference, fine-tuning and training, large-scale batch jobs, and secure ephemeral execution environments.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will build detections, investigation tooling, response automation, and playbooks for cloud and production environments. You will investigate incidents, improve security telemetry, apply LLMs to security workflows, and partner with engineers to make systems observable and secure.
Requirements
- Experience in detection engineering, incident response, security engineering, or software engineering with a security focus
- Software engineering experience building production systems
- Experience investigating incidents in cloud-native or distributed environments
- Knowledge of cloud infrastructure, Kubernetes, Linux, and networking
- Experience building detections from logs, telemetry, behavioral signals, or event data
- SQL skills for security-event investigation and detection development
- Interest in AI and LLM applications for security detection, investigation, and response
- Written and verbal communication skills
Responsibilities
- Design and build detections for attacks, abuse, and anomalous behavior
- Improve detections using telemetry, threat intelligence, and incident lessons
- Improve visibility across cloud infrastructure, containers, identity systems, and production services
- Investigate security incidents across production, cloud, and internal systems
- Build response playbooks and automation
- Drive post-incident improvements
- Build tooling for detection, investigation, and response workflows
- Use LLMs to automate analysis and accelerate investigations
- Partner with engineers to make systems observable and secure
