Detection Engineer

Neura Market; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Innovative culture

Growth opportunities

Learning stipend

Social travel stipend

Annual offsite

Co-working stipend

Job summary

ElevenLabs is seeking a Security Detection & Response Engineer to join our security operations team in London. You will build and scale detection and incident response capabilities with an automation mindset, leveraging frontier AI models to reduce manual work and improve posture.

You’ll own detection rules, triage alerts, and drive investigations using Google Chronicle, JAMF MDM, Google Workspace, Okta, and GCP SCC.

Qualifications

• Proven experience in incident response and security operations, including triaging alerts, investigations, and leading response efforts.
• Strong background in detection engineering, including developing, tuning, and maintaining security detection rules and alerts.
• Hands-on experience with SIEM infrastructure, specifically with Google Chronicle.
• Proficiency in security monitoring across platforms, including JAMF MDM for macOS endpoints, Google Workspace, Okta and general SaaS applications.
• Experience with cloud security monitoring, particularly in Google Cloud (GCP) with familiarity in Google Cloud Security Command Center (SCC).
• Solid scripting skills (e.g., Python, Bash) for automating detection and response tasks.
• Deep understanding of common attack techniques, threat intelligence, and ability to translate them into actionable detections.
• Familiarity with security frameworks and best practices (e.g., MITRE ATT&CK, NIST Cybersecurity Framework).
• Excellent analytical and problem-solving skills, with a keen eye for detail and ability to connect disparate pieces of information during investigations.

Responsibilities

• Lead investigations and coordinate incident response efforts.
• Develop and maintain security detections and automation.
• Collaborate with engineering and security teams to improve security posture.

Skills

Incident response

Detection engineering

SIEM (Chronicle)

Cloud security (GCP SCC)

JAMF MDM (macOS)

Google Workspace

Okta & SaaS security

Python / Bash scripting

Threat intelligence

MITRE ATT&CK / NIST CSF

Analytical thinking

Tools

Google Chronicle

JAMF MDM

Google Workspace

Okta

Security Command Center (SCC)

Job description

About ElevenLabs

ElevenLabs is an AI research and product company transforming how we interact with technology.

We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses - from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world's most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We've raised $781M in funding and our last valuation was $11B - multiples of 11, always.
We have expanded from voice into three main platforms:

• ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale.




• ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages.




• ElevenAPI gives developers access to our leading AI audio foundational models.

Everything we do is the result of the creativity and commitment of our team - builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you.

How we work

• High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy.




• Impact not job titles: We don’t have job titles. Instead, it’s about the impact you have. No task is above or beneath you.




• AI first: We use AI to move faster with higher-quality results. We do this across the whole company—from engineering to growth to operations.




• Excellence everywhere: Everything we do should match the quality of our AI models.




• Global team: We prioritize your talent, not your location.

What we offer

• Innovative culture: You’ll be part of a generational opportunity to define the trajectory of AI, surrounded by a team pushing the boundaries of what’s possible.




• Growth paths: Joining ElevenLabs means joining a dynamic team with countless opportunities to drive impact - beyond your immediate role and responsibilities.




• Learning & development: ElevenLabs proactively supports professional development through an annual discretionary stipend.




• Social travel: We also provide an annual discretionary stipend to meet up with colleagues each year, however you choose.




• Annual company offsite: Each year, we bring the entire team together in a new location - past offsites have included Croatia and Italy.




• Co-working: If you’re not located near one of our main hubs, we offer a monthly co-working stipend.

About the role

As a Security Detection & Response Engineer at ElevenLabs, you'll be on the front lines of our security operations, playing a critical role in building and maintaining our detection and incident response capabilities. You'll have an automation mindset, constantly looking for ways to scale our security efforts and reduce manual work, leveraging frontier AI models. This role is perfect for someone passionate about security frameworks and best practices, driven by ownership, and eager to continuously improve our security posture. You’ll be instrumental in developing best-in-class security practices as we scale.

Requirements

• Proven experience in incident response and security operations, including triaging security alerts, conducting investigations, and leading response efforts.




• Strong background in detection engineering, including developing, tuning, and maintaining security detection rules and alerts.




• Hands-on experience with SIEM Infrastructure, specifically with Google SecOps (Chronicle). This includes data onboarding, parsing, rule creation, and dashboarding.




• Proficiency in security monitoring across various platforms, including JAMF MDM for macOS endpoints, Google Workspace, Okta and general SaaS applications.




• Experience with cloud security monitoring, particularly in Google Cloud (GCP) with familiarity in GCP Security Command Center (SCC).




• Solid scripting skills (e.g., Python, Bash) for automating detection and response tasks, data parsing, and security tooling integration.




• Deep understanding of common attack techniques, threat intelligence, and the ability to translate them into actionable detections.




• Familiarity with security frameworks and best practices (e.g., MITRE ATT&CK, NIST Cybersecurity Framework).




• Excellent analytical and problem-solving skills, with a keen eye for detail and the ability to connect disparate pieces of information during investigations.

Location

This is an in-country role with a strong preference for a candidate in London.

We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.