Senior Detection Engineer, AI Security

Fluidstack; San Francisco, New York (CA, NY); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Generous PTO policy

Retirement plan

Job summary

Fluidstack is hiring a Security Detection Engineer to lead production detections and tooling for the IT surface. You will own end-to-end detection design, integrate across SIEM/EDR, and apply ML to detect threats at scale.

You will develop agentic detection tooling using LLMs for triage and investigation, set standards and metrics, and collaborate with IR and threat intel to close the detection-to-response loop.

Qualifications

• Built and tuned production detections as code, measured by precision and recall.
• Fluent across SIEM, EDR, and cloud/IT telemetry, with CI/CD and peer review.
• Applied ML or behavioral analytics to detection at scale.
• Fluent with LLM-based tooling for triage and investigation.
• Defined coverage methodology and quality metrics for a detection function.
• Threat research that drives new detections and closes loop with IR and threat intel.

Responsibilities

• Lead detection engineering for Fluidstack's IT surface, including cross-domain detections.
• Author and tune production detections as code, with peer review, CI/CD, and measured precision and recall.
• Apply AI and machine learning to build detections at scale.
• Develop novel detection tooling, including agentic capabilities that use LLMs for triage, investigation, and response.
• Set the engineering standards, coverage methodology, and quality metrics for the detection engineering discipline.
• Conduct threat and security research that informs detection logic and surfaces coverage gaps.

Skills

Detections as code

ML / behavioral analytics

LLM tooling for triage

CI/CD for detections

Threat research

Cross-domain SIEM/EDR

Tools

Sigma

Panther

SIEM

EDR

Job description

Fluidstack is hiring a Security Detection Engineer to lead production detections and tooling for the IT surface. You will own end-to-end detection design, integrate across SIEM/EDR, and apply ML to detect threats at scale.

You will develop agentic detection tooling using LLMs for triage and investigation, set standards and metrics, and collaborate with IR and threat intel to close the detection-to-response loop.