Senior Detection & Response Engineer (AI Security)

Legora AB; New York, Northern (NY, KY); Hybrid; USD 190,000 - 240,000; Full time

Benefits offered by this job

Global collaboration

Competitive compensation

In-person Union Square office

Medical, Dental & Vision

401(K) with company match

Unlimited PTO

Job summary

Legora AB in New York is seeking a Senior Security Engineer focused on detection, incident response, and protection of our AI-enabled security environment. You’ll own detections, playbooks, and incident management across endpoints, identity, cloud workloads, SaaS, and AI systems.

You will build production-grade detections, threat models, and telemetry pipelines; drive improvements through post-incident reviews; and collaborate with Legal, Trust, and IT teams to reduce risk while supporting rapid

Qualifications

• 5+ years in detection engineering, incident response, or security operations.
• Fluent Python and SQL, building production detections and telemetry.
• Experience with AI tools, LLMs and agents in security workflows.
• Strong telemetry across endpoints, identity, cloud, and SaaS.
• Ability to explain incidents clearly and drive improvements.

Responsibilities

• Own detection and response across endpoints, identity, cloud, SaaS, and AI systems.
• Build detections as production software, version-controlled and CI/CD deployed.
• Develop threat models, telemetry, and response playbooks for AI systems.
• Create and supervise triage and investigation agents with guardrails.
• Map coverage to MITRE ATT&CK and validate via hunting/testing.
• Lead on-call rotation and post-incident reviews to shorten response time.
• Collaborate with Vulnerability Management and IT on risk priorities.
• Track campaigns targeting AI companies and coordinate takedowns.

Skills

Python

SQL

Detection engineering

Incident response

Threat hunting

LLMs & automation

Tools

SPL

KQL

YARA-L

Sigma

SQL

Job description

Legora AB in New York is seeking a Senior Security Engineer focused on detection, incident response, and protection of our AI-enabled security environment. You’ll own detections, playbooks, and incident management across endpoints, identity, cloud workloads, SaaS, and AI systems.

You will build production-grade detections, threat models, and telemetry pipelines; drive improvements through post-incident reviews; and collaborate with Legal, Trust, and IT teams to reduce risk while supporting rapid