Security engineer, detection and response (UK)

Writer; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

WRITER is hiring a Staff Detection and Response Engineer to safeguard our AI infrastructure, training data, and model deployments. You will develop advanced detection systems and automated responses to evolving threats in a high-growth environment.

You'll translate threat intelligence into real-time detections, coordinate incident response across multiple teams, and hunt for complex attacks in GPU clusters and distributed training environments.

Qualifications

• 3-5+ years in security operations, detection engineering, or incident response with a proven track record
• 3+ years securing AI/ML infrastructure or distributed systems at scale

Responsibilities

• Design and implement detection strategies for AI-specific threats including prompt injection and data poisoning
• Build automated response playbooks and orchestration workflows to contain threats without human intervention
• Lead security incident response coordination across Cloud, AppSec, Enterprise, AI Security
• Hunt for sophisticated threats across GPU clusters and training infrastructure
• Build detection-as-code frameworks with version control and dashboards tracking model security metrics
• Collaborate cross-functionally as the operational security partner for all teams
• Maintain 24/7 on-call rotation for critical AI security incidents

Skills

Security operations

Incident response

Programming skills

Job description

About WRITER

WRITER is the AI platform built for the world's most ambitious marketing and revenue teams, bringing the frontier of AI to the people who drive enterprise growth. With WRITER, autonomous agents work across the buyer journey, continuously executing on market signals and enterprise intelligence to grow revenue faster. Every agent action and asset is grounded in trust, built on an Enterprise Brain that unites brand, product, and company knowledge with fiduciary-grade governance and compliance.

Fortune 500 companies are transforming how they go to market with WRITER, including 3 of the top 5 US banks, 2 of the 5 largest global CPG conglomerates, and 4 of the top 5 US healthcare insurers. Founded in 2020, WRITER is backed by investors including Insight Partners, ICONIQ, Radical Ventures, Premji Invest, Balderton, B Capital, Salesforce Ventures, Adobe Ventures, Accenture, Citi Ventures, IBM Ventures, WndrCo, and others. Learn more at WRITER.com.

About the role

Join WRITER's security team as a staff detection and response engineer and help protect the AI infrastructure that's transforming how the world works. You'll build sophisticated detection systems that identify attacks targeting our AI platform, training data, and model deployments while creating automated response capabilities that scale with our explosive growth. This isn't just traditional security work - you're defending cutting-edge AI/AGI systems against adversaries who are evolving their tactics as fast as AI itself advances.

This role combines hands-on security engineering with strategic thinking to stay ahead of novel threats that don't exist in textbooks yet. You'll be the operational arm of our security function, translating threat intelligence into real-time detections, coordinating incident response across multiple teams, and hunting for sophisticated attacks across GPU clusters and distributed training environments. If you're excited by the challenge of securing systems that are fundamentally different from anything you've protected before, this is your opportunity to define what AI security engineering looks like at scale.

You'll work closely with our AI Security research team, Cloud Infrastructure, Software Security Engineering, and AI researchers to build a defense-in-depth strategy that protects one of the most valuable AI platforms in the industry. The threats are real, the stakes are high, and the problems are intellectually fascinating.

This role can be based in San reporting to our head of security operations.

What you'll do

• Design and implement detection strategies that identify AI-specific threats including prompt injection, model extraction, data poisoning, adversarial examples, and unauthorized access to training datasets or model weights across our distributed infrastructure


• Build automated response playbooks and orchestration workflows that contain threats without human intervention, creating self-healing security systems that reduce mean time to response from hours to minutes while automatically remediating compromised inference endpoints


• Lead security incident response coordination across all teams (Cloud, AppSec, Enterprise, AI Security) when AI infrastructure or models are compromised, conducting forensic investigations on training pipeline attacks and model manipulation attempts while drafting clear incident communications for engineering and executive leadership


• Hunt proactively for sophisticated threats across GPU clusters and training infrastructure by analyzing model outputs for signs of compromise, reproducing AI-specific vulnerabilities from security research, and identifying visibility gaps in distributed training environments before adversaries exploit them


• Build detection-as-code frameworks with version control and automated deployment, onboard telemetry from AI training infrastructure and inference endpoints, and create dashboards that track model security metrics, GPU utilization patterns, and access to sensitive research data


• Collaborate cross-functionally as the operational security partner for all teams – translating AI Security's threat research into production detections, monitoring Cloud Infrastructure's GPU clusters for threats, detecting customer-impacting incidents for Software Security Engineering, and enabling responsible AI development through security guardrails


• Maintain 24/7 on-call rotation for critical AI security incidents, responding to real-time threats targeting our platform while continuously improving detection coverage and automation capabilities as our AI systems evolve

What you need

• 3-5+ years in security operations, detection engineering, or incident response with a proven track record of identifying and stopping sophisticated attacks in production environments, plus 3+ years specifically securing AI/ML infrastructure, high-performance computing environments, or other distributed systems at scale


• Strong programming skills