Senior Detection & Incident Response Engineer

Anyscale; San Francisco (CA); On-site; USD 26,000 - 44,000; Full time

Benefits offered by this job

Equity

Health insurance

Flexible time off

Parental leave

Mental health support

Job summary

Anyscale is seeking a Senior Detection and Response Engineer to own detection engineering and lead incident response across production and corporate environments. Based in India, you will report to Head of Security and partner with engineering to shape detection and response practices.

In your first year, you will build cloud, endpoint, and runtime telemetry coverage, develop a faithful correlation and alerting pipeline, and maintain incident response runbooks exercised in practice.

Qualifications

• 6+ years in security with focus on detection engineering and incident response.
• Hands-on experience building detections across cloud (AWS/Azure), EDR, and container/runtime telemetry.
• Experience leading end-to-end incident response during live incidents.
• Ability to scale detection and response capabilities and work under pressure.
• Strong communication with engineers and IT to close gaps.

Responsibilities

• Own detection coverage across cloud, endpoint, and runtime telemetry.
• Own centralized correlation and alerting that turns telemetry into detections.
• Own incident response runbooks, escalation paths, and coordination during incidents.
• Drive detection of anomalous activity, including Kubernetes footprint.
• Tune detections to maximize signal and minimize noise, measure DTDR metrics.
• Run incident retrospectives to improve detections and controls.
• Collaborate with infrastructure security and IT to close gaps.

Skills

Security expertise

Incident response

Detection engineering

Cloud (AWS/Azure)

EDR / endpoint telemetry

Kubernetes / runtime telemetry

Tools

SIEM

Detection-as-code

Job description

Anyscale is seeking a Senior Detection and Response Engineer to own detection engineering and lead incident response across production and corporate environments. Based in India, you will report to Head of Security and partner with engineering to shape detection and response practices.

In your first year, you will build cloud, endpoint, and runtime telemetry coverage, develop a faithful correlation and alerting pipeline, and maintain incident response runbooks exercised in practice.