Security Detection & Response Engineer

LangChain; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

LangChain is seeking an on‑premise security detection and response engineer to design, build, and scale monitoring across our production platform, cloud infrastructure, and agent workloads. You will translate threat models into telemetry, detections, and durable defenses while partnering with Product Security to reduce risk and drive improvements.

The role emphasizes engineering rather than manual operations, requiring strong Python or Go, Kubernetes experience, and a pragmatic product mindset.

Qualifications

• 5+ years in security engineering, with detection engineering, security operations, or incident response.
• Strong software engineering in Python or Go with production code experience.
• Cloud and Kubernetes detection depth across GCP/AWS, logging, and runtime telemetry.
• Experience building automation and developer-facing systems.

Responsibilities

• Own the detection lifecycle: translate threat models and incidents into telemetry requirements and detections-as-code; validate coverage and reduce false positives.
• Build security monitoring and telemetry across cloud, Kubernetes, and LangSmith/LangGraph control plane; ensure signals are reliable.
• Engineer investigations and threat hunting workflows; turn findings into new detections and improvements.
• Develop internal AI agents and automation to triage alerts and accelerate incident response.
• Lead incident response during on-call rotations; perform postmortems to drive durable changes.
• Collaborate with Product Security to convert threat findings into production monitoring and learnings.

Skills

Python/Go production code

Kubernetes

Threat detection concepts

Incident response

Security telemetry

On-call experience

Tools

Terraform

Helm

Job description

LangChain is seeking an on‑premise security detection and response engineer to design, build, and scale monitoring across our production platform, cloud infrastructure, and agent workloads. You will translate threat models into telemetry, detections, and durable defenses while partnering with Product Security to reduce risk and drive improvements.

The role emphasizes engineering rather than manual operations, requiring strong Python or Go, Kubernetes experience, and a pragmatic product mindset.