Staff Detection Engineer: Lead Detection & IR at Scale

Fluidstack; Seattle (WA); On-site; USD 269,000 - 330,000; Full time

Job summary

Fluidstack seeks an experienced security operations professional to lead detection engineering and incident response for its frontier AI compute infrastructure. You will own detection content across cloud and endpoint telemetry, write detections, and drive automation in Python.

You will coordinate with leadership to shape strategy and work across IT and infrastructure teams to improve telemetry and security postures.

Qualifications

• 8+ years in security operations, detection engineering, or incident response at scale.
• Proven ability to build or scale a detection engineering function with program and coverage.
• Deep hands-on experience writing detections against cloud telemetry and endpoint telemetry.
• Strong scripting and automation skills in Python or similar for detection-as-code pipelines.
• Experience leading incident response at high scale and driving postmortems into action.
• Technical leadership without heavy management overhead; able to set direction and execute.
• Bonus: GPU clusters security, HPC, or open-source detection content contributions.

Responsibilities

• Build the detection engineering function from the ground up with telemetry pipelines and runbooks.
• Own detection-as-code end-to-end with tests, version control, and CI.
• Lead incident response for high-severity events with containment and root cause analysis.
• Drive automation of triage and enrichment in Python to scale alert volume.
• Collaborate with leadership to translate threat landscape into a prioritized security roadmap.
• Work with corp IT and infrastructure teams to secure telemetry, logging, and access.

Skills

Security operations

Detection engineering

Incident response

Python scripting

Automation

Tools

AWS

GCP

Azure

EDR

Sigma

CI/CD

Job description

Fluidstack seeks an experienced security operations professional to lead detection engineering and incident response for its frontier AI compute infrastructure. You will own detection content across cloud and endpoint telemetry, write detections, and drive automation in Python.

You will coordinate with leadership to shape strategy and work across IT and infrastructure teams to improve telemetry and security postures.