Brainco

Security Engineer, Detection & Response

San Francisco Bay Area, Remote. Posted a month ago

The role

You will build and operate detection and response capabilities. You will design high-signal detections, automate triage and investigation workflows, and lead cross-functional incident response.

What you will do

  • Design, build, and maintain automation, playbooks, and systems for triage, investigation, and incident response.
  • Develop and refine high-signal detections.
  • Integrate security telemetry and tooling across cloud and application stack.
  • Lead cross-functional incident response across applications, cloud infrastructure, endpoints, identity, and internal services.
  • Translate incident data and response metrics into secure-by-design improvements.
  • Evaluate response procedures and partner with engineering, infrastructure security, IT, and operational teams.

Required qualifications

  • Demonstrated capability in security engineering, detection engineering, or incident response.
  • Hands-on experience investigating security incidents or suspicious behavior in complex environments.
  • Practical experience with EDR, SIEM, SOAR, log-management, or equivalent detection-and-response tooling.
  • Ability to write code and build software automation or detections in at least one relevant scripting or query language.
  • Strong understanding of modern cloud infrastructure and SaaS security principles.
  • Sound risk-based judgment when prioritizing threats and operational tasks.
  • Ability to make sound, timely decisions with incomplete information during active incidents.
  • Clear communication and cross-functional collaboration skills during high-pressure situations.
  • Participation in a regular on-call rotation.

Nice to have

  • Building self-serve security triage automation or AI-assisted response capabilities.
  • Threat hunting, digital forensics, threat intelligence, or infrastructure-as-code security controls.
  • Investigating complex security events within containerized or Kubernetes-based cloud environments.
  • Translating security incident trends into architectural or systemic engineering improvements.
  • Experience navigating security challenges in fast-paced, high-growth startup environments.

Benefits

  • Meaningful equity
  • Country-specific benefits

About the company

Brain Co. builds AI-native operating systems for large, regulated institutions. Their proprietary platform is called Atlas.