Senior Security Engineer - Detection Engineering

Fastly, Inc.; Los Angeles (CA); Hybrid; USD 168,000 - 201,000; Full time

Benefits offered by this job

Equity

Discretionary bonus

Job summary

Fastly, Inc. is seeking a Senior Security Engineer to join the Detection Engineering team. You will design and build detections, lead investigations, and craft AI-driven tooling to support detection and response across cloud, container, and edge environments.

The role requires strong Python skills, hands-on experience with AWS/GCP and Kubernetes, and a detections-as-code workflow with CI/CD. On-call rotations are part of the duties.

Qualifications

• Experience integrating AI tools into security operations workflows.
• Detections-as-code with version control and CI/CD.
• Proven track record leading complex security investigations.
• Strong Python or equivalent language for automations.
• Deep knowledge of AWS/GCP and Linux, containers (Kubernetes).
• Experience in threat hunting or threat modeling to guide detections.

Responsibilities

• Develop detections and analytics to identify threats across cloud, container, and edge environments.
• Lead security investigations, analyzing logs and telemetry to determine root cause.
• Build AI agents and automations to speed detection, triage, and response.
• Evaluate and maintain security tools (EDR, SOAR, SIEM).
• Conduct threat hunts to uncover unknown activity and inform detections.
• Participate in on-call rotations.

Skills

AI integrations

Detections-as-code

Incident investigations

Python scripting

Cloud platforms

Linux & containers

Threat hunting/modeling

Tools

EDR

SOAR

SIEM

Job description

the company helps people stay better connected with the things they love. the company's edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers' applications as close to their end-users as possible - at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. the company's customers include many of the world's most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.

We're building a more trustworthy Internet. Come join us.

Posting Open Date:

October 6, 2026

Anticipated Posting Close Date*:

December 6, 2026

Job posting may close early due to the volume of applicants.

Senior Security Engineer, Detection Engineering

As a Senior Security Engineer on our Detection Engineering team, you will build the detections that catch malicious activity across the the company environment and drive the investigations that follow. We are looking for a teammate with a strong security engineering foundation and hands-on experience in security incident response, detection development, and applying AI to security operations. In this role, you will design and build AI agents and automations to support detection and response, develop advanced detections, perform threat hunts, and lead security investigations.

What You'll Do:

• Develop detections and other analytics to identify threats across cloud, container, corporate, and edge environments.
• Lead security investigations, analyzing complex log sources and telemetry to determine root cause.
• Build AI agents and automations that speed up detection development, triage, and incident response.
• Research, evaluate, implement, and maintain a variety of custom and commercial security tools, such as EDR, SOAR, and SIEM.
• Conduct threat hunts to discover unknown malicious activity across our environment.
• Participate in our on-call rotations.

What We're Looking For:

• Direct experience integrating AI tools, LLMs, and automated agents into security operations workflows to accelerate alert triage, contextualize telemetry, and speed up incident response.
• Experience developing, testing, and tuning detections using a detections-as-code approach, including version control and CI/CD.
• Proven track record of leading complex security incident investigations, with deep expertise in log analysis, real-time containment, and collecting forensic artifacts.
• Strong coding skills in Python or another general-purpose language, with experience building automations for detection and response.
• In-depth knowledge of major public cloud platforms (e.g., AWS or GCP) and Linux environments, including containers (e.g., Kubernetes), along with their native logging and security tooling.
• Solid grasp of attacker tactics and techniques, with experience in threat hunting or threat modeling to guide detection priorities.

We'll be super impressed if you have experience in any of these:

• Familiarity with content delivery networks (CDN), edge cloud platforms, or the company products and services.
• Experience designing and maintaining scalable ETL processes and data pipelines to ingest, transform, and normalize security telemetry for large-scale analysis.
• Experience deploying AI agents in production to detect threats, enrich alerts, and automate response.

Work Hours:

• This position will require you to be available during core business hours and support an on-call rotation.

Work Location(s) & Travel Requirements:

The preferred locations for this position are:

• New York, NY
• San Francisco, CA
• Denver, CO

the company currently embraces a largely hybrid model for most roles which allows employees flexibility to split their time between the office and home.

There is a strong preference for Hybrid near a local office. However, we may be willing to consider remote candidates within the US.

This position may require travel as required by your role or requested by your manager.

SF / LA Fair Chance Ordinance Statement

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Salary:

The estimated salary range for this position is $167,790 to $201,348.

Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location.

This role may be eligible to participate in the company's equity and discretionary bonus programs.

Benefits:

We care about you. the company works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with the company. Curious about our offerings?

We offer a comprehensive benefits package including medical, dental, and vision insurance. Family planning, mental health support along with Employee Assistance Program, Insurance (Life, Disability, and Accident), a Flexible Vacation policy and up to 18 days of accrued paid sick leave are there to help support our employees. We also offer 401(k) (including company match) and an Employee Stock Purchase Program. For 2026, we offer 12 paid local holidays, 12 paid company wellness days.

Why the company?

-

We have a huge impact.

the company is a small company with a big reach. Not only doour customershave a tremendous user base, but we also support a growing numberofopen source projects and initiatives.Outside of code, employees are encouraged to share causes close to their heart with others so we can help lend a supportive hand.

We value diversity.

Growing and maintaining our inclusive and diverse team matters to us. We are committed to being a company where our employees feel comfortable bringing their authentic selves to work and have the ability to be successful -- every day.

We are passionate.

the company is chock full of passionate people and we're not 'one size fits all'. the company employs authors, pilots, skiers, parents (of humans and animals), makeup geeks, coffee connoisseurs, and more. We love employees for who they are and what they are passionate about.