Security Detection & Response Engineer - Remote-ready

Assort Health; San Francisco (CA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive Compensation

Lifelong Learning

Office Setup Stipend

Top-Tier Health Coverage

Flexible PTO

Meals & Snacks

Fitness Stipend

Commuter Benefits

401(k)

Job summary

Assort Health is seeking a Security Engineer to build and strengthen security foundations in a fast-moving startup, with a focus on detection and response. This role offers ownership across detection, response, and continuous improvement as the company scales.

You will partner with Engineering, Product, and Infrastructure to embed security by design, strengthen incident readiness, and drive meaningful improvements across cloud, SaaS, and production environments.

Qualifications

• 2 to 4 years of relevant security experience.
• Experience in detection engineering, incident response, and/or security operations.
• Background in modern observability stacks (SIEM, EDR, cloud telemetry, logging).
• Ability to perform telemetry review and security automation.

Responsibilities

• Build and operate detection and response capabilities across networks and infrastructure.
• Create incident playbooks, on-call and escalation paths, and run tabletop exercises.
• Improve telemetry coverage across cloud, corporate, and production environments.
• Embed detection and response into systems by design with engineering.
• Collaborate with stakeholders to advance high-priority initiatives.
• Support SOC 2 efforts and translate audit needs into remediation practices.
• Evaluate detection tooling, including open-source and AI-enabled options.
• Own hands-on scripting and automation to move fast.

Skills

Detection engineering

Incident response

Security monitoring

Cloud telemetry

SIEM

EDR

Tools

SIEM

EDR

Logging

Job description

Assort Health is seeking a Security Engineer to build and strengthen security foundations in a fast-moving startup, with a focus on detection and response. This role offers ownership across detection, response, and continuous improvement as the company scales.

You will partner with Engineering, Product, and Infrastructure to embed security by design, strengthen incident readiness, and drive meaningful improvements across cloud, SaaS, and production environments.