Threat Detection & Response Engineer

Braintrust; New York (NY); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Lunch provided (daily)

Flexible time off

Equity

Wifi & cellphone stipend

Job summary

Braintrust is seeking a Detection and Response engineer in New York to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, and lead incident response with durable improvements.

You’ll work across cloud environments (ECS/K8s), CI/CD, endpoints, and agent workloads, owning alerting and postmortems while advancing real-time threat intelligence and trustworthy automation.

Qualifications

• Proficient in modern backend languages and able to write real code in Python, TS or Go.
• Experience designing and operating detections for cloud and container environments.
• Strong incident response and on-call leadership experience.

Responsibilities

• Build security telemetry pipelines across cloud and agent-centric workloads.
• Continuously improve detections for attacks, abuse, and anomalies.
• Own the alert pipeline end-to-end with high signal-to-noise.
• Lead incident response, triage, scope, contain, and write postmortems.
• Hunt threats and develop tooling to turn evidence into detections.
• Develop agents that triage alerts and support investigations with human checks.

Skills

Python

TypeScript

Go

AWS

Kubernetes

Incident response

Tools

IAM

VPC

GuardDuty

CloudTrail

Job description

Braintrust is seeking a Detection and Response engineer in New York to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, and lead incident response with durable improvements.

You’ll work across cloud environments (ECS/K8s), CI/CD, endpoints, and agent workloads, owning alerting and postmortems while advancing real-time threat intelligence and trustworthy automation.