Senior Detection & Response Engineer — AI Cyber Defense

Nscale; Oregon; Hybrid; USD 160,000 - 190,000; Full time

Benefits offered by this job

Equity

Medical, dental, vision

Flexible PTO

Parental leave

Retirement plan

Job summary

Nscale is seeking Detection & Response Engineers to define what we detect, command responses, and automate the path between detection and action across enterprise, cloud, production, data centre, and OT environments. You’ll work a three-person regional rotation, spending one week in three on the operational slot and two weeks on engineering.

You will partner with AI agents to close coverage gaps, build automation, and ensure readiness for the next incident.

Qualifications

• 5+ years in detection engineering, incident response, security operations, threat hunting, or related roles.
• Detection judgement: read a rule and say what it catches, what it misses, and how noisy it will be in production.
• Incident command experience: led or been central to a significant incident.
• Experience building in, and securing, public cloud environments like AWS and GCP.
• Automation: you automate what you repeat, using queries, scripting, APIs, or workflow automation.

Responsibilities

• Map our detection coverage against attacker tradecraft and gaps.
• Turn coverage gaps and escalations into clear detection ideas with AI agents.
• Assess and tune detection ideas and rule logic proposed by agents.
• Make the promotion call; you own whether a rule goes live.
• Retire or retune live detections that are noisy or obsolete.
• Identify telemetry gaps and justify closing them.

Skills

Detection engineering

Incident response

Security operations

Threat hunting

Automation

Tools

AWS

GCP

Job description

Nscale is seeking Detection & Response Engineers to define what we detect, command responses, and automate the path between detection and action across enterprise, cloud, production, data centre, and OT environments. You’ll work a three-person regional rotation, spending one week in three on the operational slot and two weeks on engineering.

You will partner with AI agents to close coverage gaps, build automation, and ensure readiness for the next incident.