Senior Security Engineer: AI-Driven Detection & Response

hackerone; San Francisco (CA); On-site; USD 182,000 - 202,000; Full time

Benefits offered by this job

Health insurance

Equity stock options

Retirement plans

Paid public holidays and unlimited PTO

Paid maternity and parental leave

Leaves of absence

Employee Assistance Program

Job summary

HackerOne is a global leader in CTEM, combining agentic AI with a vast security researcher community to continuously identify and remediate exposures across code, cloud, and AI systems.

Senior Security Engineer, Detection and Response, will design detection capabilities for a cloud-native environment, write code, and automate workflows. Remote role within ~50 miles of multiple U.S. tech hubs. Flexible work approach supports collaboration and strong security outcomes.

Qualifications

• 5+ years in detection and response, security engineering, or security-focused software engineering.
• Strong software engineering fundamentals with production code experience.
• Hands-on with cloud environments (AWS) and services like CloudTrail, GuardDuty, VPC flow logs.
• Experience with log aggregation/analysis platforms (Datadog, Splunk, ELK) and endpoint detection tools.

Responsibilities

• Design, build, and maintain detection-as-code across cloud, SaaS, endpoints, and identity systems.
• Build automated investigation and response workflows to replace manual runbooks.
• Develop and deploy AI/LLM-powered security tooling to accelerate investigations.
• Lead and participate in incident response, including detection, containment, and retrospectives.
• Partner with engineering to expand logging, observability, and embed detection in the dev lifecycle.
• Improve detection quality by analyzing alert performance and building feedback loops.

Skills

Python

Go

Ruby

AWS

Datadog

Splunk

SentinelOne

CrowdStrike

Docker

Kubernetes

Tools

Docker

Kubernetes

Job description

HackerOne is a global leader in CTEM, combining agentic AI with a vast security researcher community to continuously identify and remediate exposures across code, cloud, and AI systems.

Senior Security Engineer, Detection and Response, will design detection capabilities for a cloud-native environment, write code, and automate workflows. Remote role within ~50 miles of multiple U.S. tech hubs. Flexible work approach supports collaboration and strong security outcomes.