Detection & Response Engineer: Threat Hunting & Incident Lead

Digitailor; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Braintrust is seeking a Detection and Response engineer to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, lead incident response, and stay ahead of the curve incorporating real-time threat intelligence.

You’ll have a big impact with a small team that has outsized capabilities, building scalable telemetry, detections, and secure agent tooling while maintaining strong

Qualifications

• Proficient in backend technologies and able to write real code (Python, TypeScript, or Go).
• AWS experience including IAM, VPC, KMS, GuardDuty, CloudTrail.
• Fluency in at least one cloud platform (Azure or GCP).
• Experience with Kubernetes detection: audit logs, runtime telemetry, and workload identity.
• Knowledge of endpoint security (MacOS) and detection/response techniques.
• Hands-on incident experience: on-call, leading incidents, writing postmortems.

Responsibilities

• Build security telemetry pipelines across cloud, CI/CD, identity, endpoints, and agent workloads.
• Continuously improve detections for attacks, abuse, and anomalies.
• Own the alert pipeline end-to-end and reduce false positives.
• Lead incident response and participate in on-call; scope, contain, remediate, and postmortems.
• Hunt for threats and build tooling to turn evidence into detections.
• Build agents that triage alerts and gather evidence with human-in-the-loop controls.
• Perform vulnerability response and drive remediation across the infrastructure.

Skills

Backend development

Cloud security (AWS)

Cloud platforms (Azure/GCP)

Kubernetes detection

Endpoint security (MacOS)

Incident response & on-call

Communication

AI/LLM security

Postmortem writing

Tools

Kubernetes

Job description

Braintrust is seeking a Detection and Response engineer to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, lead incident response, and stay ahead of the curve incorporating real-time threat intelligence.

You’ll have a big impact with a small team that has outsized capabilities, building scalable telemetry, detections, and secure agent tooling while maintaining strong