Senior Security Engineer, Detection and Response

About This Opportunity

We are representing a confidential cybersecurity technology company that is rebuilding its Detection & Response function with an AI-first engineering approach. This is a remote opportunity for candidates within approximately 50 miles of Austin TX, Seattle WA, Washington DC, San Francisco CA, or Boston MA.

As a Senior Security Engineer, you will design and deliver detection and response capabilities that protect a modern, cloud-native environment. This role emphasizes building and automating, not just triaging alerts. You'll write code, develop AI-powered tooling, and create automated workflows that scale what a small team can accomplish.

Responsibilities

• Design, build, and maintain detection-as-code capabilities across cloud infrastructure, SaaS applications, endpoints, and identity systems
• Build automated investigation and response workflows that replace manual runbooks, leveraging AI to scale triage, enrichment, containment, and remediation
• Develop and deploy AI/LLM-powered security tooling to accelerate investigations, reduce alert fatigue, and extend team capacity
• Lead and participate in incident response activities, including detection, investigation, containment, and retrospectives
• Partner with engineering and platform teams to expand logging, improve observability, and embed detection capabilities into the development lifecycle
• Continuously improve detection quality by analyzing alert performance and building feedback loops between incidents and detections
• Proactively identify gaps in visibility or coverage and translate them into concrete detection and response solutions

What We're Looking For

Required Qualifications:

• 5+ years of experience in detection and response, security engineering, or software engineering with a security focus
• Strong software engineering fundamentals with proficiency in Python, Go, Ruby, or similar languages, and experience working in production codebases
• Hands-on experience with cloud environments (AWS preferred), including services such as CloudTrail, GuardDuty, and VPC flow logs
• Experience with log aggregation and analysis platforms (e.g., Datadog, Splunk, ELK) and endpoint detection tools (e.g., SentinelOne, CrowdStrike)

Preferred Qualifications:

• Experience building AI/LLM-powered security tooling or applying AI to detection, triage, or investigation workflows
• Experience with detection-as-code frameworks or building custom detection pipelines
• Familiarity with containerized environments (Docker, Kubernetes, ECS/EKS)
• Experience with threat intelligence, threat hunting, forensics, or attacker tradecraft frameworks such as MITRE ATT&CK

Location & Work Authorization:

• Remote position for candidates within approximately 50 miles of Austin TX, Seattle WA, Washington DC, San Francisco CA, or Boston MA
• Visa/work permit sponsorship is not available

How We Work With You

When you apply through Get A Job.ai, our talent team conducts an initial screening to ensure your qualifications align with our client's needs. Once we confirm you're a strong match, we submit your profile directly to the hiring organization. Throughout the process, we serve as your advocate and point of contact.

Important: Please do not attempt to contact the client directly. All communication and submissions must go through Get A Job.ai to ensure your application is properly considered.

Pay

Compensation details will be discussed during the screening process based on experience and qualifications.

Our client offers comprehensive benefits including health insurance (medical, vision, dental), life and disability insurance, equity stock options, retirement plans, paid public holidays, unlimited PTO, paid maternity and parental leave, and an Employee Assistance Program.

Equal Opportunity

Get A Job.ai is committed to fostering an inclusive recruiting process. We consider all qualified candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.