AI Security Engineer, Detection and Response

Cyber StrategiX; San Francisco, San Diego, Los Angeles, Boston (CA, CA, CA, MA); Hybrid; USD 128,000 - 178,000; Full time

Benefits offered by this job

Health insurance

Equity packages

Paid time off

Parental leave

Job summary

ŌURA is seeking an AI Security Engineer to join its Detection & Response team to build AI agents and automations for alert triage, investigation, detection engineering, and approved response actions. The role blends security operations, threat hunting, incident response, and digital forensics across endpoints, cloud, identity, and SaaS environments.

The ideal candidate has 5+ years in cybersecurity with hands-on experience in Python, cloud infrastructure, and LLM-based solutions for security

Qualifications

• 5+ years of cybersecurity experience.
• Hands-on in security operations, detection engineering, and incident response.
• Experience building or integrating AI agents for security operations.
• Scripting in Python and experience with cloud environments and IaC.
• Strong communication and collaboration with technical and leadership teams.

Responsibilities

• Design, build, and deploy AI agents and automations to investigate and triage alerts, write and tune detections, and automate routine security operations.
• Run AI-driven threat hunting and translate visibility gaps into new detections.
• Lead security incident response from detection through containment, eradication, recovery, and post-incident review.
• Conduct investigations and digital forensics across endpoint, cloud, identity, and SaaS environments.

Skills

Security operations

Incident response

Threat hunting

Digital forensics

Python

LLM integration

Automation

Job description

ŌURA# AI Security Engineer, Detection and ResponseAI SummaryOura is hiring a senior AI Security Engineer for its Detection & Response team to build AI agents and automations for alert triage, investigation, detection engineering, and approved response actions. The role combines hands-on security operations, threat hunting, incident response, and digital forensics across endpoint, cloud, identity, and SaaS environments. Candidates need at least five years of cybersecurity experience, with strong Python, cloud, infrastructure-as-code, and LLM-agent integration capabilities. This is a US-based remote role, with a preference for East Coast candidates and optional access to offices or local coworking spaces. The position requires calm prioritization during incidents and clear communication with technical and leadership stakeholders.Apply for this job View companyRemote from: USASalary: USD 127,500–178k / yrDepartment: CybersecurityEmployment: Full TimeExperience: Open levelPublished: 11 Nov 2026Apply before: 11 Dec 2026Listing views: 143Application actions: 5Application toolkit## Make your next move.Prepare your resume, explore your fit, and draft a cover letter for this opportunity.Opportunity details## About this role.Our mission at ŌURA is to empower every person to own their inner potential. Our award-winning products help our global community gain a deeper knowledge of their readiness, activity, and sleep quality by using their Oura Ring and its connected app. We’ve helped millions of people understand and improve their health by providing daily insights and practical steps to inspire healthy lifestyles.Empowering the world starts with living our values and empowering our team. As a quickly growing company focused on helping people live healthier and happier lives, we ensure that our team members have what they need to do their best work — both in and out of the office.Our mission at Ōura is to empower every person to own their inner potential. Our award-winning products help our global community gain a deeper knowledge of their readiness, activity, and sleep quality by using their Ōura Ring and its connected app. We’ve helped over a million people understand and improve their health by providing daily insights and practical steps to inspire healthy lives.Empowering the world starts with living our values and empowering our team. As a quickly growing company focused on helping people live healthier and happier lives, we ensure that our team members have what they need to do their best work – both in and out of the office.We are looking for an AI Security Engineer to join our Detection & Response team. You will focus on building AI agents and automations for security incident lifecycle, threat hunting, and detection engineering. Ōura is building an AI-native detection and response program, where agents investigate and resolve routine alerts and people focus on the hard calls. You will be hands-on in our environment, turning that plan into working solutions that protect our systems, data, and the members we serve.### **What You Will Do:*** Design, build, and deploy AI agents and automations that investigate and triage alerts, write and tune detections as code, enrich incidents, and take approved response actions to automate routine security operations.* Run AI-driven threat hunting, and turn gaps in visibility into new detection capabilities.* Conduct security incident response from detection through containment, eradication, recovery, and post-incident review, coordinating with engineering, IT, our managed SOC partners, and leadership.* Conduct investigations and digital forensics across endpoint, cloud, identity, and SaaS environments.This is a remote role based in the US with a strong preference for candidates based on the East coast.We have offices in San Francisco, San Diego and Los Angeles for those who prefer hybrid or office settings. Ōura employees in other major cities (like Boston and New York) occasionally gather informally at local co-working locations.### **What you’ll bring:*** Minimum 5 years of experience in cybersecurity, with a primary focus on security operations, detection engineering and incident response.* Proven experience leading incident investigations and digital forensics.* Hands-on experience writing and tuning detections in security detection solutions.* Hands-on experience building or integrating end-to-end AI agents and LLM-based solutions for security operations, such as alert triage, investigation, or automated response.* Scripting and automation skills in Python, and experience with cloud environments (AWS, Azure, GCP) and infrastructure as code.* You are organized, prioritize effectively, and stay calm under pressure, handling incidents alongside long-term build work.* Excellent communication, interpersonal, and collaboration skills with the ability to synthesize highly technical concepts into clear and concise language### **Benefits**At Ōura, we care about you and your well-being. Everyone here at Ōura has a ring of their own and we are continually looking to improve employee health.### What we offer:* Competitive salary and equity packages* Health, dental, vision insurance, and mental health resources* An Ōura Ring of your own plus employee discounts for friends & family* 20 days of paid time off plus 13 paid holidays plus 8 days of flexible wellness time off* Paid sick leave and parental leaveŌura takes a market-based approach to pay, which may vary depending on your location. US locations are categorized into tiers based on a cost of labor index for that geographic area. While most offers will be closer to the starting range, successful candidates’ pay will be determined based on job-related skills, experience, qualifications, work location, internal peer equity, and market conditions. These ranges may be modified in the future.Region 1 $151,300 – $178,000 Region 2 $138,550 – $163,000 Region 3 $127,500 – 150,000A recruiter can determine your Region based on your US location.We are not considering candidates residing in the following states: Alaska (AK), Delaware (DE), Iowa (IA), Mississippi (MS), Nebraska (NE), South Dakota (SD), West Virginia (WV), and Wisconsin (WI).ŌURA is proud to be an equal opportunity workplace. We celebrate diversity and are committed to creating an inclusive environment for all employees. Individuals seeking employment at ŌURA are considered without regard to age, ancestry, color, gender (including pregnancy, childbirth, or related medical conditions), gender identity or expression, genetic information, marital status, medical condition, mental or physical disability, national origin, protected family care or medical leave status, race, religion (including beliefs and practices or the absence thereof), sexual orientation, military or veteran status, or any other characteristic protected by federal, state, or local laws. We will not tolerate discrimination or harassment based on any of these characteristics.We will work to ensure individuals with disabilities are provided reasonable accommodation to participate in the interview process, to perform essential job functions, and to receive other benefits and privileges of employment.Disclaimer: Beware of fake job offers! We’ve been alerted to scammers posing as ŌURA recruiters, especially for remote roles. Please note:* Our jobs are listed only on the ŌURA Careers page and trusted job boards.* We will never ask for personal information like ID or payment for equipment upfront.* Official offers are sent through Docusign after a verbal offer, not via text or email.Stay cautious and protect your personal details.To all recruitment agencies: ŌURA does not accept agency resumes. Please do not forward resumes to our jobs alias, ŌURA employees, or any other organization’s location. ŌURA is not responsible for any fees related to unsolicited resumes.