Threat Detection & Incident Response Engineer

Braintrust; New York (NY); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Medical coverage

Lunch provided

Flexible time off

Competitive salary & equity

Wifi & cellphone stipend

Job summary

Braintrust is seeking a Detection and Response engineer to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, lead incident response, and stay ahead of the curve incorporating real-time threat intelligence.

You’ll have a big impact with a small team that has outsized capabilities, working on telemetry pipelines, detections, and automation across AWS, Kubernetes, and cloud

Qualifications

• Proficient in modern backend technologies and comfortable writing real code in Python, TypeScript, or Go.
• Familiar with AWS services (IAM, VPC, KMS, GuardDuty, CloudTrail) and cloud platforms like Azure or GCP.
• Kubernetes detection experience: audit logs, runtime telemetry, and workload identity.
• Knowledge of endpoint security (MacOS) and detection/response techniques.
• Hands-on incident experience: on-call, leading incidents, and postmortems.
• Strong written and verbal communication; clear POV on AI/LLM security.

Responsibilities

• Build security telemetry pipelines across cloud execution environments (ECS/K8s), CI/CD systems, identity systems, endpoints, and agent workloads.
• Continuously improve detections for attacks, abuse, and anomalous behavior.
• Own the alert pipeline end-to-end and maintain signal-to-noise balance.
• Lead incident response and participate in on-call: triage, scope, containment, remediation, and postmortems.
• Hunt proactively for threats and build tooling to turn evidence into detections.
• Build agents that triage alerts, enrich findings, gather evidence, and scope incidents with human-in-the-loop controls.

Skills

Python

TypeScript

Go

AWS

Kubernetes

Incident response

Threat hunting

Tools

Azure

GCP

Job description

Braintrust is seeking a Detection and Response engineer to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, lead incident response, and stay ahead of the curve incorporating real-time threat intelligence.

You’ll have a big impact with a small team that has outsized capabilities, working on telemetry pipelines, detections, and automation across AWS, Kubernetes, and cloud