Detection & Response Engineering Lead

Confluent; United States; Hybrid; USD 180,000 - 260,000; Full time

Job summary

Confluent is seeking an engineering leader to head Detection & Response within Infrastructure Security. Define the strategy, roadmap, and execution for real-time threat detection, investigation, and response across AWS, GCP, and Azure.

You will lead a distributed team across North America and India, leveraging Kubernetes pipelines, ETL workflows, AI-assisted triage, and Confluent's data-streaming platform to automate security at scale.

Qualifications

• 12+ years in software development, security engineering, or security operations with 5+ years in direct leadership.
• Proven track record in building, coaching, and scaling engineering teams across multiple time zones.
• Deep expertise in detection engineering, incident response, and threat intelligence.

Responsibilities

• Own the strategic vision and roadmap for Detection & Response across multi-cloud infrastructure.
• Build, scale, and mentor a distributed, global team in North America and India.
• Advance detection engineering and incident response with scalable automation and telemetry.
• Oversee incident response operations as escalation point and Incident Commander.
• Drive post-incident reviews and operational metrics to improve program maturity.
• Partner with Engineering, Legal, and Compliance to embed telemetry and proactive response.

Skills

Security leadership

Incident response

Team building

Cross-time-zone leadership

Engineering collaboration

Education

Bachelor's or Master's in CS/Engineering

Tools

Kubernetes

Data pipelines

Job description

Confluent is seeking an engineering leader to head Detection & Response within Infrastructure Security. Define the strategy, roadmap, and execution for real-time threat detection, investigation, and response across AWS, GCP, and Azure.

You will lead a distributed team across North America and India, leveraging Kubernetes pipelines, ETL workflows, AI-assisted triage, and Confluent's data-streaming platform to automate security at scale.