Senior Detection and Response Engineer Cyber Defense
Nscale is a London-based, full-stack AI cloud and infrastructure company that provides GPU compute, managed AI services, orchestration software, data centers, and power infrastructure for AI training, fine-tuning, and inference.
Funding history
About Nscale
Nscale builds and operates vertically integrated AI infrastructure spanning software, GPU compute, networking, storage, purpose-built data centers, and power. Its active cloud platform offers self-service inference endpoints, fine-tuning, managed Kubernetes and Slurm, virtual machines, and GPU clusters.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will evaluate and improve detection coverage, validate agent-proposed rules, and automate investigation and response workflows. You will rotate through operational incident response, command serious incidents, execute approved containment, maintain incident readiness, and build security-platform capabilities.
Requirements
- 5+ years in detection engineering, incident response, security operations, threat hunting, security engineering, or related roles
- Detection-engineering judgement and knowledge of detection coverage
- Knowledge of attacker tradecraft and security telemetry
- Working knowledge of Windows, macOS, and Linux internals
- Incident command experience
- Experience building and securing public-cloud environments such as AWS and GCP
- Experience with query languages, scripting, APIs, or workflow automation
- Hands-on investigation experience across endpoint, identity, cloud, SaaS, network, or production workloads
- Containment judgement under time pressure
Responsibilities
- Map detection coverage and identify telemetry gaps
- Turn incidents, threat research, and coverage gaps into detection ideas
- Assess, tune, promote, retire, or retune detections
- Automate enrichment, triage, containment, case handling, and reporting
- Build response actions, integrations, and agent tooling
- Command security incidents and coordinate responders
- Make containment decisions and execute approved actions
- Run post-incident reviews, tabletop exercises, and recovery tests
- Maintain playbooks and runbooks
- Investigate escalations and close cases with evidence and follow-up
Benefits
- Bonus
- Equity
- Flexible workplace
