Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff Detection & Response Engineer

Home > Python programming jobs

Staff Detection & Response Engineer in USA new

  • San Francisco, CA

Responsibilities

  • Own the Detection & Response roadmap, including telemetry strategy, detection engineering, alert quality, response processes, and coverage metrics.
  • Define detection architecture and determine logging, telemetry destinations, in-house development, and partner-tool usage.
  • Build and maintain detection coverage across AWS, endpoints, identity, SaaS, and CI/CD environments.
  • Create versioned and tested detections as code and build audit logging and telemetry pipelines, including data-access and AI/agentic activity detections.
  • Own incident response activities including triage, containment, forensics, postmortems, and remediation tracking.
  • Improve incident response processes in incident.io through runbooks, severity definitions, escalation paths, and tabletop exercises.
  • Lead technical investigations involving insider risk and unauthorized access.
  • Build and operate the InfoSec on-call rotation, automate safe response actions, and provide technical leadership during incidents.

Requirements

  • 6+ years of security experience with meaningful detection engineering and incident response experience in cloud-native environments.
  • Hands-on experience writing SIEM rules or detection-as-code pipelines and managing false-positive rates.
  • Experience leading real security incidents, including technical investigations and response.
  • Strong command of cloud-native logging and detection surfaces, with AWS strongly preferred.
  • Experience with EDR at fleet scale and identity-based detection.
  • Fluency in at least one automation language such as Python, Go, or Ruby.
  • Ability to work effectively in a regulated fintech environment.
  • Preferred experience includes building a detection program from scratch, detecting AI/LLM or agentic abuse, investigating insider threats and unauthorized access, and working in consumer fintech or financial services.

Salary: $338k - $387k/yr

Kikoff

Kikoff builds consumer fintech products to help people establish and improve credit, including a reported Credit Account tradeline, rent and bill reporting, identity protection, and an AI-powered debt negotiation tool; its platform uses machine learning for underwriting, fraud, and personalizatio...

Similar positions

Software Engineer in Test

  • Roadie
  • Full time
  • USA
  • 09/13/2026
  • Salary: Competitive
  • Remote

Principal Software Engineer - Builder Experience

  • Elastic
  • Full time
  • Remote
  • 09/13/2026
  • Salary: €73k-€116k
  • Greece

Principal Software Engineer - Builder Experience

  • Elastic
  • Full time
  • Remote
  • 09/13/2026
  • Salary: zł 369k-zł 584k
  • Poland

Senior Devops Engineer

  • Woliba
  • Full time
  • USA
  • 09/13/2026
  • Remote

Senior Core Infrastructure Engineer

  • Oracle
  • Full time
  • USA
  • 09/13/2026
  • Salary: Competitive
  • Nashville, TN