Detection & Response Lead - Security Engineering

Digitailor; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Serval seeks a Detection and Response Lead to architect and scale security monitoring, incident response, and post‑incident improvement across our infrastructure and customer environments. You will mentor a growing team of observability, detection & response, and threat intelligence professionals, and partner with Engineering and Product to embed detection by design into our systems.

We require 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and

Qualifications

• 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations.
• Experience building and leading detection & response, instrumentation/observability, and threat intelligence teams.
• Strong leadership, written and verbal communication skills, and ability to drive durable improvements across programs and people.
• Expertise in modern observability stacks (SIEM, data lakes, EDR, cloud telemetry, logging) and practical detection strategies.

Responsibilities

• Design, implement, and operate detection and response across networks and environments.
• Lead and mentor a team spanning observability, detection & response, and threat intelligence.
• Establish incident playbooks, on-call, escalation paths, and continuous improvement of response quality and speed.
• Embed detection by design across engineering, product, and infrastructure teams.

Skills

Detection engineering

Incident response

Security operations

Observability

Leadership

SIEM

Cloud telemetry

Communication

Tools

SIEM

EDR

Data lakes

Job description

Serval seeks a Detection and Response Lead to architect and scale security monitoring, incident response, and post‑incident improvement across our infrastructure and customer environments. You will mentor a growing team of observability, detection & response, and threat intelligence professionals, and partner with Engineering and Product to embed detection by design into our systems.

We require 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and