Staff Security Engineer (Detection & Response)

Join our team as a Staff Security Engineer (Detection & Response) and take ownership of our Incident Detection and Response program. You will be responsible for threat modeling our systems and codebase, directing investigations when incidents occur, and finding bugs in our code and gaps in our SDLC. You will work closely with an AppSec-focused engineer and an infrastructure-focused engineer, guiding technical direction and judgment calls. Additionally, you will help us understand and manage the security risks associated with our growing use of AI and LLMs.

Responsibilities

• Diriger le programme de détection et de réponse aux incidents, y compris la modélisation des menaces de nos systèmes et de notre code.
• Participer activement à la recherche de bugs dans notre code et aux lacunes de notre cycle de développement logiciel (SDLC) avant qu'ils ne deviennent des incidents.
• Diriger les enquêtes de manière pratique, en analysant les journaux, en construisant la narration de ce qui s'est passé et en conseillant les dirigeants.

Requirements

• Strong communication skills, with enough credibility to direct an investigation and influence peers informally
• Experience building threat models of codebases, reasoning about attack surface, trust boundaries, and data flow well enough to anticipate where problems will emerge
• Comfortable reading production code across multiple languages and stacks well enough to judge whether a finding is actually exploitable
• 6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM engineering ownership
• A track record of finding and fixing systemic weaknesses, whether they surfaced through an incident or through your own proactive review
• Interest or experience in securing AI and LLM-powered systems, including risks like prompt injection, model misuse, or agentic tool abuse
• Prior exposure to golden-path or secure-by-default infrastructure initiatives, even in a supporting role
• Experience with container or image security and the patching lifecycle

Preferred

• Hands-on experience with AI-assisted security operations tooling, such as AI SOC platforms, LLM-based triage, or agentic escalation systems
• A relevant certification such as GCIH, GCFA, GCDA, OSCP, or CISSP

Pay

USD 221,000 - 299,000