Detection and Response Engineer

present of AI; San Francisco (CA); On-site; USD 170,000 - 240,000; Full time

Job summary

Braintrust is seeking a hands-on security engineer who spots threats, responds to incidents, and builds the systems behind both. The role spans cloud infrastructure, Kubernetes, CI/CD, identity tools, and Mac endpoints, so a strong candidate codes in Python, TypeScript, or Go and knows AWS well.

They have on-call and postmortem experience and can explain what happened and what to fix. The role builds security agents for alert triage and defends a platform that monitors AI agents, emphasizing

Skills

Threat detection

Incident response

Cloud security

Python

TypeScript

Go

Tools

AWS

Kubernetes

CI/CD

Job description

This is a hands-on security engineering role that covers spotting threats, responding to incidents, and building the systems behind both. The work spans cloud infrastructure, Kubernetes, CI/CD, identity tools, and Mac endpoints, so a strong candidate codes comfortably in Python, TypeScript, or Go and knows AWS well. They have real on-call and postmortem experience and can explain clearly what happened and what to fix.

How it fits the AI era

AI shows up in two ways here. The role builds agents that sort alerts, gather evidence, and scope incidents, so routine triage shifts toward software with people checking the results. The product also runs customers' AI agents, so the threats include abuse of agentic workloads. Judgment during an incident, deciding what to contain, and earning trust in the automation stay human.

How it builds AI experience

Someone in this role would build security agents with human approval steps and evals that show whether the automation can be trusted. They would also defend a platform that traces and evaluates other companies' AI agents, which gives close exposure to how agent systems fail or get attacked. Candidates can prepare by practicing LLM red-teaming, studying agent sandbox risks, or building a small alert triage agent with measured accuracy.

Worth showing

• Detection-as-code projects
• AWS security and logging depth
• Incident lead and postmortems
• AI agent security point of view

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About Braintrust

Braintrust is a platform for observing, evaluating, and discovering patterns in AI agents running in production, per the company.