Detection and Response Engineer

Description

The company makes an observability platform for AI agents. It analyzes agent traces to surface the most important patterns, so teams can see how agents behave in production and improve them.

Customers include Notion, Stripe, Box, OpenAI, and Cloudflare. They use the platform to trace agents, find problems in their observability data, and run evals to guide improvements.

The team is small but has broad reach, so the hire can make a large impact.

You will design and build systems that identify, analyze, and remove threats across the company's stack.

Responsibilities

• Build security telemetry pipelines covering cloud execution environments (ECS and Kubernetes), CI/CD systems, identity systems, endpoints, and agentic workloads.
• Keep improving detections for attacks, abuse, and unusual behavior.
• Own the alert pipeline from start to finish and keep the noise low.
• Lead incident response and take part in on-call rotations. Triage, scope, contain, and remediate incidents, then write postmortems that lead to lasting fixes.
• Search for threats proactively and build tooling that turns what you find into new detections.
• Build agents that triage alerts, enrich findings, collect evidence, and scope incidents. Include human-in-the-loop controls and evals so the automation stays reliable.
• Run vulnerability response by assessing impact and driving fixes across the infrastructure.

Requirements

• Strong backend skills and real coding ability in Python, TypeScript, or Go.
• AWS experience with IAM, VPC, KMS, GuardDuty, and CloudTrail, plus working fluency in Azure or GCP.
• Experience detecting threats in Kubernetes using audit logs, runtime telemetry, and workload identity.
• Knowledge of macOS endpoint security and detection and response techniques.
• Hands-on incident experience, including being on call, leading incidents, and writing postmortems.
• Strong written and verbal communication.
• A clear view on AI and LLM security, with hands-on experience defending against relevant threats.
• Bonus: prior work in LLM red-teaming, agent sandbox research, or other AI-relevant security threat defense.

Conditions

Equal opportunity applies to this role.

Benefits

• Medical, dental, and vision insurance.
• Free daily lunch, snacks, and drinks.
• Flexible time off.
• Competitive salary and equity.
• Wifi and cellphone stipend.