Lead Detection Engineer: Cloud Security & IR

Fluidstack; San Francisco (CA); On-site; USD 224,000 - 344,000; Full time

Job summary

Fluidstack is seeking a security leader to build and scale our detection engineering program, protecting the world's largest AI compute buildout. You will own end-to-end detection, lead incident response, and drive automation across cloud and endpoints.

You will partner with leadership to translate threat intelligence into a prioritized roadmap, working across corp IT and infrastructure to ship fixes at speed. The role demands hands-on expertise and strong Python skills.

Qualifications

• 8+ years in security operations, detection engineering, or incident response.
• Built or scaled a detection engineering function with program and coverage.
• Hands-on experience writing detections against cloud telemetry and EDR logs.
• Strong scripting and automation in Python or similar.
• Incident response experience at a company operating at scale.
• Technical lead who sets direction and gets the work done.
• Works well across corp IT and infrastructure teams to ship telemetry fixes.
• Bonus: GPU clusters, HPC environments, or open-source detection content contributions.

Responsibilities

• Build the detection engineering function from the ground up: telemetry pipelines, detection content, alert routing, and response runbooks.
• Own detection-as-code end to end, writing detections across cloud and endpoint sources with tests and version control.
• Lead incident response for high-severity events, driving containment and root cause analysis.
• Drive automation of triage and enrichment in Python so alert volume scales with headcount.
• Partner with leadership on security strategy, translating threat landscape into a roadmap with clear tradeoffs.
• Work across corp IT and infrastructure teams to fix telemetry, logging, and access issues.

Skills

Security operations

Detection engineering

Incident response

Python scripting

Automation

Cloud telemetry

EDR telemetry

OS-level signals

Technical leadership

Tools

Sigma

Open-source detection content

Job description

Fluidstack is seeking a security leader to build and scale our detection engineering program, protecting the world's largest AI compute buildout. You will own end-to-end detection, lead incident response, and drive automation across cloud and endpoints.

You will partner with leadership to translate threat intelligence into a prioritized roadmap, working across corp IT and infrastructure to ship fixes at speed. The role demands hands-on expertise and strong Python skills.