Senior Security Detection & Response Lead

SERVAL; San Francisco (CA); On-site; USD 210,000 - 270,000; Full time

Benefits offered by this job

Impact

Growth

Culture

Job summary

Serval is seeking a Detection and Response Lead to scale our cybersecurity operations and embed secure by design practices across our platform. You will set strategy, build a high-performing team, and partner with Engineering and Product to ensure proactive detection and rapid incident response.

You will drive continuous improvement, maintain world-class operational rigor, and mentor engineers and analysts to handle sophisticated adversaries in a fast-paced, security-conscious environment.

Qualifications

• 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations.
• Led detection and response teams, instrumentation/observability, and threat intelligence functions.
• Proven ability to drive durable improvements to programs, processes, and people.
• Excellent written and verbal communication, able to manage incidents with many stakeholders.
• Expertise in modern observability stacks and detection primitives.
• Knowledge of adversary tradecraft and translating it into practical detection strategies.

Responsibilities

• Design, build, and operate detection and response capabilities across multiple networks and infrastructure.
• Lead and mentor a team spanning observability, detection/response, and threat intel.
• Establish incident playbooks, on-call, escalation paths, and post-incident reviews.
• Improve detection quality and coverage with reliable telemetry across cloud and on-prem environments.
• Embed detection/response into Serval's systems by design across Engineering and Product.
• Develop a security program resilient to sophisticated threats using Serval agents.

Skills

Leadership

Detection engineering

Incident response

Observability

Threat intelligence

Security operations

Communication

Tools

SIEM

EDR

Cloud telemetry

Data lakes

Logging

Job description

Serval is seeking a Detection and Response Lead to scale our cybersecurity operations and embed secure by design practices across our platform. You will set strategy, build a high-performing team, and partner with Engineering and Product to ensure proactive detection and rapid incident response.

You will drive continuous improvement, maintain world-class operational rigor, and mentor engineers and analysts to handle sophisticated adversaries in a fast-paced, security-conscious environment.