Detection and Response Engineer

The available sources do not contain information about the company name for rounx.com.; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Unknown is seeking a Detection and Response Engineer to design and implement scalable systems for identifying, investigating, and responding to threats across our platform. This role focuses on automation, building detections, investigation tools, and response mechanisms that leverage AI where it enhances signal, speed, and effectiveness.

You will collaborate with infrastructure, platform, and security teams to strengthen the resilience of our systems.

Qualifications

• Experience in detection engineering, incident response, or security engineering.
• Strong software development skills and familiarity with cloud infrastructure, Kubernetes, Linux, and networking.
• Proficiency in SQL with interest in applying AI/LLMs to security tasks.

Responsibilities

• Design high-fidelity detections for threats across our platform.
• Improve visibility across cloud and container environments.
• Lead incident investigations and drive post-incident improvements.
• Build automation to reduce response time and accelerate containment.
• Develop internal tooling to enhance security workflows.

Skills

Detection engineering

Incident response

Security engineering

Cloud infrastructure

Linux

Kubernetes

Networking

SQL

AI

LLMs

Tools

SIEM

SOAR

EDR

Job description

We are seeking a Detection and Response Engineer to design and implement scalable systems for identifying, investigating, and responding to threats across our platform. This role focuses on automation, requiring you to build detections, investigation tools, and response mechanisms that leverage AI where it enhances signal, speed, and effectiveness. You will collaborate with infrastructure, platform, and security teams to strengthen the resilience of our systems.

Key responsibilities

• designing high-fidelity detections
• improving visibility across cloud and container environments
• leading incident investigations
• building automation to reduce response time
• developing internal tooling to enhance security workflows

We are looking for candidates with experience in detection engineering, incident response, or security engineering, strong software development skills, and familiarity with cloud infrastructure, Kubernetes, Linux, and networking.

Proficiency in SQL and an interest in applying AI and LLMs to security tasks are essential.

Preferred qualifications include experience with SIEM, SOAR, EDR platforms, Kubernetes security, threat hunting, or contributing to security operations in fast-paced environments.