Senior Detection Engineer, AI-Driven Security

Fastly, Inc.; New York (NY); Hybrid; USD 168,000 - 201,000; Full time

Job summary

Fastly, Inc. is seeking a Senior Security Engineer on the Detection Engineering team. You will design detections across cloud, container, and edge, and lead investigations into complex incidents.

You will build AI agents and automations to speed up triage and response, research security tools (EDR, SOAR, SIEM), and apply a detections‑as‑code approach with version control and CI/CD. The role requires strong Python skills, deep cloud and Linux know‑how (AWS/GCP, Kubernetes), and experience threat

Qualifications

• Experience integrating AI tools, LLMs, and automated agents into security operations.
• Developing, testing, and tuning detections using a detections‑as‑code approach, including version control and CI/CD.
• Proven track record of leading complex security incident investigations, with deep expertise in log analysis, real‑time containment, and collecting forensic artifacts.
• Strong coding skills in Python or another general‑purpose language, with experience building automations for detection and response.

Responsibilities

• Develop detections and analytics to identify threats across cloud, container, and edge environments.
• Lead security investigations, analyzing complex log sources and telemetry to determine root cause.
• Build AI agents and automations that speed up detection development, triage, and incident response.
• Research, evaluate, implement, and maintain a variety of security tools (EDR, SOAR, SIEM).
• Conduct threat hunts to discover unknown malicious activity across the environment.
• Participate in on‑call rotations.

Skills

AI integrations

Detections development

Python

Cloud platforms (AWS/GCP)

Kubernetes

CI/CD

Threat hunting

Incident response

Log analysis

Tools

EDR

SOAR

SIEM

AI agents

Job description

Fastly, Inc. is seeking a Senior Security Engineer on the Detection Engineering team. You will design detections across cloud, container, and edge, and lead investigations into complex incidents.

You will build AI agents and automations to speed up triage and response, research security tools (EDR, SOAR, SIEM), and apply a detections‑as‑code approach with version control and CI/CD. The role requires strong Python skills, deep cloud and Linux know‑how (AWS/GCP, Kubernetes), and experience threat