Staff Security Engineer (AI-Driven Detection & Response)

Join Fullscript as a Staff Security Engineer, where you will define and drive our defensive threat detection, incident response, and AI-assisted SecOps capabilities across our cloud infrastructure, identity, endpoints, and application ecosystems. You will architect modern detection systems, leverage AI/ML to automate SecOps workflows, and establish defensive testing practices for AI threat vectors. This role requires a strong background in detection engineering, incident response, and security engineering, with a focus on AI-specific threat vectors.

Definir y dirigir la detección de amenazas defensivas, la respuesta a incidentes y la capacidad de SecOps asistida por IA en la infraestructura de la nube.

Responsibilities

• Arquitectar sistemas de detección modernos, aprovechar la IA/ML para automatizar los flujos de trabajo de SecOps y establecer prácticas de prueba defensiva para los vectores de amenaza de IA.
• Colaborar con los equipos de Ingeniería y Plataforma para garantizar que nuestras capacidades de detección y respuesta escalen con la infraestructura de Fullscript.
• Excellent written communication. This role regularly turns investigation findings into clear, factual updates for technical and non-technical stakeholders alike

Requirements

• The ideal candidate has owned enterprise-scale detection engineering and incident response end-to-end. You are a pragmatic, forward-thinking engineer who excels at designing AI-augmented SOC workflows, conducting targeted AI defensive testing, and converting threat telemetry into automated, high-precision detection and response systems
• Working knowledge of adversary tradecraft (MITRE ATT&CK) and the ability to translate it into practical, tuned detections rather than noisy alerts
• Experience managing security controls as code (e.g., Terraform), with changes made through peer review rather than manual console changes
• 8+ years of experience in detection engineering, incident response, or security engineering, with demonstrated leadership in shaping organizational security strategy
• Hands-on incident response experience: triage, investigation, containment, and postmortem/playbook development
• Experience securing cloud environments (AWS preferred) and modern SaaS/identity stacks
• Strong scripting/automation skills (Python, JavaScript, or similar) and experience building workflows in a SOAR-style or workflow automation platform
• Proven ability to partner directly with engineering and infrastructure teams to define telemetry and control requirements for systems you don't own
• Experience supporting a healthcare, regulated, or otherwise highly sensitive-data environment

Preferred

• Practical experience incorporating AI tooling into SecOps workflows, along with familiarity with detection strategies for AI-specific threat vectors
• Experience contributing to or building from open detection content, such as Sigma rules or community rule repos
• Experience collaborating with red/purple-team exercises to validate detection coverage
• Relevant certifications (GCIH, GCFA, GCTI, GCDA, or equivalent practical experience)