Detection and Response Platform Engineer

Jobtailor; Sunnyvale (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

Jobtailor in Sunnyvale, CA, is seeking an experienced engineer to own and evolve core cloud infrastructure for detection and response workflows at scale. You will design telemetry pipelines, manage environments, and automate investigation and response using security tools.

You will work with AWS/Azure/GCP, IAM, networking, and logging, building reliable production systems with IaC (Terraform/Pulumi) and CI/CD, while maintaining playbooks and runbooks for platform health.

Qualifications

• 5+ years in cloud infrastructure, platform/SRE, software eng, or security engineering with strong infra focus.
• Strong proficiency in Python.
• Write clean, maintainable, and testable code for production systems.
• Hands-on experience operating production systems in AWS, Azure, or GCP.
• Experience with IAM, networking, and logging/auditing.
• Experience building and operating event/log pipelines and data workflows, streaming/batch.
• Strong fundamentals in reliability and data quality.
• Experience with infrastructure as code and deployment automation (Terraform/Pulumi, CI/CD).
• Practical knowledge of detection and response across cloud, identity, and endpoints.
• Fundamentals in OS, networking, and troubleshooting distributed systems.
• Excellent written communication skills.
• Ability to create clear documentation and runbooks.

Responsibilities

• Own and evolve core infrastructure powering detection and response workflows at scale.
• Design and maintain security telemetry pipelines: collection, normalization, enrichment, retention of logs/events.
• Own execution environment and tooling for detections and response automation.
• Manage dependencies and release processes; ensure runtime health monitoring.
• Automate investigation/response workflows via integrations across security tools.
• Establish engineering standards: interfaces, automated tests, code reviews, docs.

Skills

Python

Cloud infra

Event pipelines

Reliability

Documentation

On-call

Tools

Terraform

Pulumi

CI/CD

AWS

Azure

GCP

Job description

• Own and evolve core infrastructure powering detection and response workflows at scale
• Design and maintain security telemetry pipelines, including collection, normalization, enrichment, and retention of logs and events
• Own and evolve the execution environment and tooling for detections and response automation
• Manage dependencies and configuration, release processes, and runtime health monitoring
• Automate investigation and response workflows through integrations across security tools
• Establish engineering standards including clear interfaces, automated tests, code review, and extensible documentation
• Own platform operational health through metrics, alerting, and reliability-focused on-call responsibilities
• Explore emerging approaches, potentially leveraging AI, to reduce toil and strengthen security posture
• Maintain operational playbooks and procedures for platform health, diagnosis, and recovery

Requirements

• 5+ years of experience in cloud infrastructure, platform/SRE, software engineering, or security engineering with a strong infrastructure focus
• Strong proficiency in Python
• Ability to write clean, maintainable, and testable code for production systems
• Hands-on experience operating production systems in AWS, Azure, or GCP
• Experience with IAM, networking, and logging/auditing
• Experience building and operating event/log pipelines and data workflows, streaming and/or batch
• Strong fundamentals in reliability and data quality
• Experience with infrastructure as code and deployment automation, such as Terraform/Pulumi and CI/CD
• Practical knowledge of detection and response concepts across cloud, identity, and endpoint environments
• Strong fundamentals in operating systems, networking, and troubleshooting distributed systems
• Excellent written communication skills
• Ability to create clear documentation and runbooks

Core Competencies

Demonstrates expertise in cloud infrastructure and security engineering, with a strong focus on building and maintaining scalable detection and response workflows. Proficient in automation, operational health management, and the development of engineering standards for production systems.

Highest-signal resume keywords

• Cloud Infrastructure Experience
• Python Proficiency
• Event/Log Pipeline Management
• Infrastructure as Code (Terraform/Pulumi)
• Production Systems Operations

Hard Skills

• Python
• Cloud Infrastructure
• Event/Log Pipelines
• Infrastructure as Code
• CI/CD
• IAM
• Networking
• Logging/Auditing
• Reliability Fundamentals
• Troubleshooting Distributed Systems

Soft Skills

• Excellent Written Communication
• Documentation Skills

Industry Keywords

• Security Telemetry
• Detection and Response
• Operational Health
• Automation
• Monitoring

Tools & Technologies

• AWS
• Azure
• GCP
• Terraform
• Pulumi