Senior Detection and Response Engineer

Skills

About the Role

You will build detection coverage across cloud, endpoint, and runtime telemetry. You will operate centralized correlation and alerting, lead incident response, create and exercise runbooks, tune detections, measure response performance, and work with engineering and IT to close security gaps.

Requirements

• 6+ years of security experience focused on detection engineering and incident response.
• Experience building detections and correlation across AWS, Azure, endpoint, and runtime telemetry.
• Experience owning incident response end to end and leading live incidents.
• Experience building and scaling detection and response capabilities.
• Knowledge of incident response and detection engineering.
• Ability to work with engineers and IT to remediate security gaps.

Responsibilities

• Build detection coverage across cloud, endpoint, and runtime telemetry.
• Own centralized correlation and alerting capabilities.
• Lead incident response, including runbooks, escalation paths, and incident coordination.
• Detect anomalous activity across environments, including Kubernetes.
• Tune detections and measure detection and response performance.
• Run incident retrospectives and incorporate lessons into detections and controls.
• Partner with infrastructure security and IT to close response-related gaps.

Benefits

• Stock options
• Healthcare plans with 99% of premiums covered by Anyscale
• 401k Retirement Plan
• Wellness & Education Stipend
• Paid Parental Leave
• Fertility Benefits
• Paid Time Off
• Commute reimbursement
• In-office meals covered