Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Detection and Response Engineer

Home > Other programming jobs

Detection and Response Engineer in USA

  • New York, NY

Responsibilities

  • Design and build high-fidelity detections for attacks, abuse, and anomalous behavior across infrastructure and production systems.
  • Improve detections using telemetry, threat intelligence, and incident lessons learned.
  • Improve visibility across cloud infrastructure, containers, identity systems, and production services.
  • Lead or participate in investigations across production infrastructure, cloud environments, and internal systems.
  • Build investigation playbooks and response automation that improve speed and consistency.
  • Drive post-incident improvements that eliminate future incident classes.
  • Build internal tooling for detection, investigation, and response workflows.
  • Use LLMs to automate repetitive analysis, accelerate investigations, and surface actionable insights from security telemetry.
  • Improve the collection, quality, and usability of security telemetry across the platform.
  • Partner with engineering teams to make new systems observable and secure by default.
  • Help teams instrument services with telemetry needed for effective detection and response.
  • Drive security improvements that make the platform easier to defend over time.

Requirements

  • Experience in detection engineering, incident response, security engineering, or software engineering with a strong security focus.
  • Strong software engineering skills and experience building production systems.
  • Experience investigating security incidents in cloud-native or distributed environments.
  • Familiarity with modern cloud infrastructure, Kubernetes, Linux, and networking.
  • Experience building detections from logs, telemetry, behavioral signals, or large-scale event data.
  • Strong SQL skills for investigating security events and developing detections.
  • Interest in applying AI and LLMs to detection, investigation, and response, including emerging threats involving AI-powered systems.
  • Strong written and verbal communication skills.
  • Preferred: experience building AI- or LLM-powered security tooling.
  • Preferred: experience with SIEM, SOAR, or EDR platforms.
  • Preferred: experience with Kubernetes security or large-scale cloud infrastructure.
  • Preferred: experience with threat hunting, malware analysis, or digital forensics.
  • Preferred: experience contributing to security operations in a high-growth engineering organization.

Salary: $150k - $270k/yr

Modal

Customers rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale. Every era of computing came with new workloads that previous infrastructure couldn't se...

Similar positions

Test Automation Engineer

  • EXL
  • Full time
  • Others
  • 10/30/2026
  • Mexico City, Mexico

Junior Software Engineer

  • Taboola
  • Full time
  • Others
  • 10/30/2026
  • Tel Aviv-Yafo, Israel

Sr. Staff Software Engineer

  • Pinterest
  • Full time
  • USA
  • 10/30/2026
  • Salary: $209k-$429k
  • Remote

Manager, Machine Learning Engineering, Checkout

  • Affirm
  • Full time
  • Remote
  • 10/30/2026
  • Salary: EUR 103,000 - 139,000
  • Spain

Backend Engineer, Profile & Community

  • Airbnb
  • Full time
  • USA
  • 10/30/2026
  • Salary: $162k-$186k
  • Remote