Security Engineer, Detection & Response (Remote, US only)

IllTip; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

IllTip is seeking a security engineer to join the detection and response team for a mental health care technology platform used by therapists, patients, and payer partners across the United States. The role emphasizes hands-on work, asynchronous collaboration, and practical automation with AI support where it adds real value.

You will build and tune detections, run incident response and threat hunts, and mentor peers.

Qualifications

• 1-2+ years of dedicated security response and automation experience, or a security-adjacent engineering background.
• 4-5+ years in DevOps, IT, software engineering or similar, with concrete security responsibilities.
• Proficiency in Python or a similar scripting language, with experience building your own automation.
• Hands-on experience with logging, detection or observability platforms in cloud or distributed environments.
• Comfort working autonomously in an async environment and coordinating with both technical and non-technical teams.
• Legal authorization to work in the United States.

Responsibilities

• Build and tune detections and logging across cloud, corporate and SaaS environments to ensure reliable real-time alerting.
• Run incident response, threat hunting and threat modeling; keep runbooks current after incidents.
• Implement automation and AI-assisted tooling for detection and response; balance automated vs human decisioning.
• Triage security alerts quickly, separating real signal from noise.
• Take part in the security on-call rotation and mentor peers on security practices.
• Document detections, logging capabilities, response procedures and threat intel so knowledge is shared across the team.

Skills

Python

Tools

SIEM

Logging platforms

Job description

This is a security engineering role on the detection and response team of a mental healthcare technology company that runs a practice-management and insurance platform used by tens of thousands of therapists across all 50 states. The security team protects the data and systems of therapists, patients and payer partners. The work is hands-on, asynchronous and high-autonomy, with a strong focus on practical automation and AI used where it genuinely helps.

Responsibilities

• Build and tune detections and logging coverage across cloud, corporate and SaaS environments, including SIEM and data pipeline work, so real-time alerting is reliable.
• Run incident response, threat hunting and threat modeling, and keep response processes and runbooks current after every incident.
• Implement automation and AI-assisted tooling for detection and response, and judge when a deterministic tool or a human is the better choice.
• Triage security alerts quickly, separating real signal from noise.
• Take part in the security on-call rotation and mentor peers on security practices.
• Document detections, logging capabilities, response procedures and threat intel so knowledge is shared across the team.

Requirements

• 1-2+ years of dedicated security response and automation experience, or a security-adjacent engineering background.
• 4-5+ years in DevOps, IT, software engineering or similar, with concrete security responsibilities.
• Proficiency in Python or a similar scripting language, with experience building your own automation.
• Hands-on experience with logging, detection or observability platforms in cloud or distributed environments.
• Comfort working autonomously in an async environment and coordinating with both technical and non-technical teams.
• Legal authorization to work in the United States.

Applicants must be based in: United States.