Remote AI-Driven Detection & Response Security Engineer

LiftOff LLC; United States; Remote; USD 184,000 - 250,000; Full time

Job summary

Liftoff is seeking a highly experienced security engineer to own and operate our SIEM (Panther) and drive AI-augmented SOC tooling adoption. You will triage alerts, lead incident response, and develop automation to reduce manual toil while collaborating with Engineering and IT.

Ideal candidates bring 5+ years in security roles, strong writing, and the ability to scale security across a large, high-traffic platform.

Qualifications

• 5+ years in security engineering, security operations, detection engineering, or software engineering with a security focus.
• Hands-on production SIEM operation - onboarding log sources, writing and maintaining detection content, and triaging alerts.
• Write production-quality code for security automation and detection-as-code.
• Experience leading or substantially contributing to security incident response.
• Strong technical writing - design docs, runbooks, and post-incident reviews.
• Demonstrated judgment in prioritizing security work using a risk-based approach.
• Ability to quickly navigate large, unfamiliar codebases and reason about complex engineering systems.
• Excellent verbal communication.
• Willing to participate in an on-call rotation.

Responsibilities

• Own day-to-day operation of Liftoff's SIEM (Panther) - log source ingestion, detection content, and the alert investigation pipeline.
• Lead Liftoff's adoption of AI-augmented SOC tooling (e.g. Prophet, Dropzone, or equivalent) as a multi-year modernization investment.
• Triage incoming security alerts and drive timely investigation and remediation with stakeholders across Engineering and IT.
• Lead incident response - investigation, containment, and post-incident review - and mature processes and runbooks so response becomes predictable and repeatable.
• Build tooling and automation that detects active threats, enriches alerts, and reduces manual investigation toil.
• Partner with Engineering and IT to make detection and response self-service where possible - clear log-onboarding paths, documented detection proposals, accessible runbooks - so security scales without becoming a bottleneck.
• Close the feedback loop between the team's offensive and proactive findings and detection coverage.
• Partner across the security team on cloud, infrastructure, and application security work alongside your detection and response focus - every engineer on this team covers breadth beyond their primary focus.
• Participate in the Security team's on-call rotation and incident response.

Skills

Security engineering

Security operations

SIEM

Incident response

Security automation

Detection engineering

Tools

Panther SIEM

Prophet Security

Dropzone AI

AWS

Job description

Liftoff is seeking a highly experienced security engineer to own and operate our SIEM (Panther) and drive AI-augmented SOC tooling adoption. You will triage alerts, lead incident response, and develop automation to reduce manual toil while collaborating with Engineering and IT.

Ideal candidates bring 5+ years in security roles, strong writing, and the ability to scale security across a large, high-traffic platform.