Principal AI-Driven Defensive Security Architect

Tykhe Inc; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

LSI Inc. is seeking a Staff or Principal Defensive Security Engineer (Frontier) in San Francisco, hybrid. You will lead the defender role in self-play loops, shaping detection, correlations, and investigations across SOC environments.

Expect work spanning malware analysis, threat research, and AI-enabled defenses with strong cross-team collaboration. You will design instrumented, ground-truth telemetry environments and define the analyst’s verdicts and playbooks, while partnering with offense on

Qualifications

• 5+ years hands-on defense across detection engineering, threat hunting, IR and forensics.

Responsibilities

• Own defensive capability for Defense Models and set direction for detection, alert triage, correlation and response.
• Build defensive Cyber World Models with instrumented environments and ground-truth labels from attacks.
• Translate analyst tradecraft into tools, playbooks, and reward functions with evidenced verdicts.
• Research and analyze threat actors, campaigns, and malware to build detections and hunts.
• Design how the model links signals across sources into MITRE ATT&CK-aligned stories.
• Develop detection pipelines and benchmarks for SOC integration and AI agent defense.

Skills

Defensive security

Threat hunting

Incident response

Forensics

SOC architecture

Malware analysis

Reverse engineering

Python

Go/Rust/TypeScript

Tools

Sigma

KQL

SPL

Elasticsearch/QL

YARA

Splunk

Elastic Security

Cortex

Job description

LSI Inc. is seeking a Staff or Principal Defensive Security Engineer (Frontier) in San Francisco, hybrid. You will lead the defender role in self-play loops, shaping detection, correlations, and investigations across SOC environments.

Expect work spanning malware analysis, threat research, and AI-enabled defenses with strong cross-team collaboration. You will design instrumented, ground-truth telemetry environments and define the analyst’s verdicts and playbooks, while partnering with offense on