Security Engineer, Detection and Response

The role

You will build the detection and response program by setting strategy, selecting tooling, and leading incidents. You will build logging pipelines, write detections as code, and use AI to automate triage and investigation.

What you will do

• Stand up logging and telemetry pipelines across cloud, Kubernetes, bare-metal GPU hosts, threat intel platforms and identity/SaaS providers
• Write, test, and tune detections as code
• Lead and run threat hunting to turn findings into lasting detections
• Build AI-driven detection and response using LLMs and agents
• Lead incidents from triage and containment through forensics, communication, and post-incident review
• Write the IR plan and playbooks, establish severity models, and set on-call rotations
• Design and lead tabletop exercises with engineering and leadership
• Own the D&R roadmap and build-vs-buy decisions
• Define and report on coverage, MTTD, and MTTR
• Partner with infra, platform, and ML teams to fix gaps exposed by incidents

Required qualifications

• AI fluency: use LLMs, agents, and AI coding tools daily to build detections, automate investigations, and ship tooling
• 5+ years in security engineering, with deep hands-on detection engineering and incident response experience
• Experience leading incidents in cloud-native environments (AWS/GCP, Kubernetes, Linux)
• Sound judgment during incidents, with actions proportional to real business impact
• Hands-on with SIEM, EDR, and cloud security tooling
• Has built or scaled a D&R or IR program, ideally as an early hire or founding team member
• Communicates clearly under pressure to different audiences, from engineers to executives

Nice to have

• Specialization in GPU infrastructure, ML platforms, or multi-tenant compute
• Background or experience in forensics, malware analysis, or threat intelligence
• Hands-on experience with detections-as-code or SOAR automation
• Experience supporting SOC 2 or ISO 27001 audits

Benefits

• Competitive salary + equity
• Full health, dental, and vision coverage
• Opportunity to work on frontier AI infrastructure
• Interesting and challenging work
• A lot of learning and growth opportunities
• Visa sponsorship
• Relocation help to San Francisco
• Health, dental, and vision insurance (US)
• Regular team events and offsites

Before you apply

• We offer visa sponsorship and will help you relocate to San Francisco

About the company

fal is the generative media ecosystem powering the next generation of AI products. They build infrastructure, tools, and model access for developers and enterprises.