Detection & Response Security Engineer — Automation + AI

IllTip; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

IllTip is seeking a security engineer to join the detection and response team for a mental health care technology platform used by therapists, patients, and payer partners across the United States. The role emphasizes hands-on work, asynchronous collaboration, and practical automation with AI support where it adds real value.

You will build and tune detections, run incident response and threat hunts, and mentor peers.

Qualifications

• 1-2+ years of dedicated security response and automation experience, or a security-adjacent engineering background.
• 4-5+ years in DevOps, IT, software engineering or similar, with concrete security responsibilities.
• Proficiency in Python or a similar scripting language, with experience building your own automation.
• Hands-on experience with logging, detection or observability platforms in cloud or distributed environments.
• Comfort working autonomously in an async environment and coordinating with both technical and non-technical teams.
• Legal authorization to work in the United States.

Responsibilities

• Build and tune detections and logging across cloud, corporate and SaaS environments to ensure reliable real-time alerting.
• Run incident response, threat hunting and threat modeling; keep runbooks current after incidents.
• Implement automation and AI-assisted tooling for detection and response; balance automated vs human decisioning.
• Triage security alerts quickly, separating real signal from noise.
• Take part in the security on-call rotation and mentor peers on security practices.
• Document detections, logging capabilities, response procedures and threat intel so knowledge is shared across the team.

Skills

Python

Tools

SIEM

Logging platforms

Job description

IllTip is seeking a security engineer to join the detection and response team for a mental health care technology platform used by therapists, patients, and payer partners across the United States. The role emphasizes hands-on work, asynchronous collaboration, and practical automation with AI support where it adds real value.

You will build and tune detections, run incident response and threat hunts, and mentor peers.