Detection & Response Security Engineer for AI Threats

Thinking Machines Lab Inc.; San Francisco (CA); On-site; USD 300,000 - 350,000; Full time

Benefits offered by this job

Health, dental, and vision benefits

Unlimited PTO

Paid parental leave

Relocation support

Job summary

Thinking Machines Lab Inc. in San Francisco seeks a Detection and Response Engineer to build and run defenses for our frontier AI platforms, models and data. You’ll own telemetry pipelines, detections, and incident response, collaborating with security, infra, research, and product teams to scale protections.

You’ll hunt threats, translate intel into detections, and develop automation and playbooks to shorten detection and response times, including on-call coverage and tabletop exercises.

Qualifications

• Bachelor’s degree or equivalent in CS/engineering.
• Proficiency in Python or Rust for data pipelines and tooling.
• Experience leading investigations during real incidents.
• Hands-on with security data pipelines: ingestion, normalization, storage and query.
• Experience threat intelligence: tracking adversaries and MITRE ATT&CK mappings.
• Strong cloud and container telemetry knowledge (AWS/GCP/Azure, Kubernetes).
• Familiarity with host/network forensics and telemetry.
• Clear communication for technical and non-technical audiences.

Responsibilities

• Lead incident response end-to-end: triage, scoping, containment, eradication, recovery, and postmortems.
• Design, build, and operate security data pipelines powering detection and response.
• Author, deploy, and maintain high-fidelity detections across SIEM, cloud, and tooling.
• Build and run threat intelligence: hunts, detections, and hardening recommendations.
• Proactively hunt for threats; develop automation and response tooling.
• Collaborate with researchers and product teams to detect AI-specific threats.
• Develop and exercise incident response plans, on-call processes, and tabletop exercises.
• Participate in an on-call pager rotation for security incidents.

Skills

Python

Rust

Incident response

Data pipelines

Detections

Threat intel

Cloud telemetry

Kubernetes

Communication

Education

Bachelor's degree or equivalent in CS/engineering

Tools

Splunk

Elastic

Panther

BigQuery

Snowflake

ClickHouse

Kafka

Flink

Vector

Job description

Thinking Machines Lab Inc. in San Francisco seeks a Detection and Response Engineer to build and run defenses for our frontier AI platforms, models and data. You’ll own telemetry pipelines, detections, and incident response, collaborating with security, infra, research, and product teams to scale protections.

You’ll hunt threats, translate intel into detections, and develop automation and playbooks to shorten detection and response times, including on-call coverage and tabletop exercises.