Detection & Response Engineer — Equity & Flexible Time Off

Candidate; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Daily lunch, snacks, and beverages

Flexible time off

Competitive salary and equity

Wifi & cellphone stipend

Job summary

Braintrust is seeking a Detection and Response engineer to design systems that identify and eradicate threats across the Braintrust stack. You’ll drive detection-as-code, run security operations with agents, and lead incident response to continuously improve security posture.

You’ll build telemetry pipelines, triage alerts, and triage incidents with human-in-the-loop controls, while staying ahead with real-time threat intelligence and postmortems that yield durable improvements.

Qualifications

• Strong backend coding skills in Python, TypeScript or Go.
• Experience with AWS (IAM, VPC, KMS, GuardDuty, CloudTrail) and one of Azure or GCP.
• Kubernetes detection experience including audit logs and runtime telemetry.
• Endpoint security knowledge (MacOS) and incident response experience.
• On-call incident leadership and postmortem writing.

Responsibilities

• Build security telemetry pipelines across cloud and CI/CD environments.
• Improve detections for attacks, abuse, and anomalous behavior.
• Own the alert pipeline end-to-end and reduce noise.
• Lead incident response, triage, scope, contain, and remediate.
• Hunt for threats and develop detections from evidence.

Job description

Braintrust is seeking a Detection and Response engineer to design systems that identify and eradicate threats across the Braintrust stack. You’ll drive detection-as-code, run security operations with agents, and lead incident response to continuously improve security posture.

You’ll build telemetry pipelines, triage alerts, and triage incidents with human-in-the-loop controls, while staying ahead with real-time threat intelligence and postmortems that yield durable improvements.