Detection & Response Engineer - AI-Driven Security

Triwill Group; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Modal is seeking a Detection & Response Engineer to build systems that identify, investigate, and respond to threats across our platform. This engineering role emphasizes automation, creating detections, investigation tooling, and response capabilities that scale with our infrastructure, using AI where it meaningfully improves signal and speed.

You'll collaborate with infrastructure, platform, and security teams to ensure incidents fortify the platform and that security is observable by design

Qualifications

• Experience in detection engineering, incident response, security engineering, or software engineering with a security focus.
• Strong software engineering skills for building production systems.
• Experience investigating security incidents in cloud-native or distributed environments.
• Familiarity with cloud infrastructure, Kubernetes, Linux, and networking.
• Experience building detections using logs, telemetry, or large-scale event data.
• Strong SQL skills for investigating security events and developing detections.
• Interest in applying AI/LLMs to detection, investigation, and response.

Responsibilities

• Design and build high-fidelity detections for attacks, abuse, and anomalies across production systems.
• Lead or participate in investigations spanning production infrastructure and cloud environments.
• Build playbooks and automation to reduce investigation time and improve response consistency.
• Drive post-incident improvements to prevent future incidents.
• Build internal tooling to improve detection and response workflows.

Skills

Detection engineering

Incident response

Security engineering

Cloud-native environments

Kubernetes

Linux

Networking

SQL for security events

AI/LLMs in security

Communication

Tools

SIEM

SOAR

EDR

Job description

Modal is seeking a Detection & Response Engineer to build systems that identify, investigate, and respond to threats across our platform. This engineering role emphasizes automation, creating detections, investigation tooling, and response capabilities that scale with our infrastructure, using AI where it meaningfully improves signal and speed.

You'll collaborate with infrastructure, platform, and security teams to ensure incidents fortify the platform and that security is observable by design