Detection & Response Engineer — AWS/EDR/AI Security

Angi; United States; Remote; USD 150,000 - 225,000; Full time

Benefits offered by this job

Performance bonus

Equity

Medical, dental, vision

Flexible vacation

401K retirement plan

Pet discount plans

Job summary

Angi seeks a senior security engineer to build and own detections across AWS, EDR, identity, SaaS, and AI gateways. You will own the security log pipeline as a product, enabling triage, analysis, and incident response.

You will also extend coverage to Angi’s AI products to guard against prompt injection, tool-call abuse, and data exfiltration. The role requires hands-on AWS, Terraform, and Kubernetes experience, with 5+ years on a security team supporting product/engineering and cloud infra.

Qualifications

• 5+ years on a security team supporting product/engineering functions and cloud infrastructure.
• Software engineering experience with Python, and an engineering mindset for building reliable security infrastructure.
• Hands-on with AWS, infrastructure-as-code (Terraform), and containers/Kubernetes.

Responsibilities

• Build and own detections across AWS (GuardDuty, CloudTrail, SecurityHub), EDR, identity, SaaS, and AI gateway.
• Own the security log pipeline as a product, exposing logs for triage, analysis, and incident response.
• Extend detection coverage to Angi's agentic AI products, targeting prompt injection, tool-call abuse, and data exfiltration.

Skills

Security engineering

Python programming

Cloud security

Tools

AWS

Terraform

Kubernetes

Job description

Angi seeks a senior security engineer to build and own detections across AWS, EDR, identity, SaaS, and AI gateways. You will own the security log pipeline as a product, enabling triage, analysis, and incident response.

You will also extend coverage to Angi’s AI products to guard against prompt injection, tool-call abuse, and data exfiltration. The role requires hands-on AWS, Terraform, and Kubernetes experience, with 5+ years on a security team supporting product/engineering and cloud infra.