This is a Fully Remote Job
About Our Client:
The organization operates at the intersection of artificial intelligence, art, and science, focusing on developing world models to simulate and understand real-world dynamics. It addresses challenges in AI related to robotics, disease, and scientific discovery by accelerating learning through simulation rather than real-world trial and error. This approach aims to transform storytelling, scientific progress, and human advancement.
About the Opportunity:
The DETECTION & RESPONSE ENGINEER role is responsible for developing and managing the detection and response program that protects the organization's infrastructure, research environment, and products from attacks. This position ensures effective logging, alerting, incident triage, and recovery, working closely with security, platform, and research engineering teams to secure a complex AI research and deployment environment.
Responsibilities:
Own end-to-end detection and response processes, including logging, alerting, triage, and recovery
Develop and tune detections as code across cloud environments, Kubernetes, identity systems, endpoints, and SaaS
Lead incident response from alert to containment and forensics, producing post-incident reports
Build automation to reduce manual triage including enrichment, correlation, containment, and evidence collection
Monitor AI agent and developer tooling telemetry and implement controls
Collaborate with engineers to ensure new systems have logging and response playbooks at launch
Conduct threat hunts and tabletop exercises, addressing identified vulnerabilities
Translate incident and detection metrics into evidence for SOC 2, ISO 27001, and customer security reviews
Participate in security incident on-call rotations
Requirements:
Experience in hands-on incident response, including alert triage, investigations, and reporting
Proficiency in building and tuning SIEM detections, preferably managed as code
Knowledge of attacker techniques in cloud and Kubernetes environments and associated log indicators
Ability to write automation scripts or tools in Python, Typescript, Rust, or similar languages
Familiarity with major cloud platforms and Kubernetes auditing, RBAC, and workload identity
Strong written communication skills for incident documentation and leadership updates
Sound judgment regarding alerts, automation, and escalation
Pay Range and Compensation Package:
The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.
Equal Opportunity Statement:
Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.