Security Engineer, Detection & Response
Brainco · San Francisco Bay Area
About this role
**Security Engineer, Detection & Response** **About Brain Co.** Brain Co. builds AI-native operating systems for large, regulated institutions. Each system is designed for a specific industry, powered by agents that push real workflows forward. Underneath it all is **Atlas**, our proprietary platform that keeps customers in control, secure by design, and never locked into one model. **Why now** Brain Co. is entering its next phase of production deployments on a national scale, with an elite team and a growing footprint across government, insurance, health, and financial services. Every project ships to production and is expected to create measurable customer value and impact. --- ## **About the role** We’re looking for a **Security Engineer, Detection & Response** to build and operate our detection and response capabilities as Brain Co. expands. Reporting to the **Head of Security**, you’ll partner closely with engineering, infrastructure, infrastructure security, IT, and operational teams to protect our environments and respond effectively to security incidents. This is an **engineering-focused builder role** (not passive alert monitoring). You’ll strengthen our security posture from the ground up by: - Designing **high-signal detections** - Automating **triage and investigation workflows** - Leading **cross-functional incident response** - Converting incident findings into **safer engineering defaults** across the company Because the program is early, your judgment will shape the tooling, workflows, metrics, and operating model—not just the alerts you investigate. --- ## **What you’ll build & own** - Design, build, and maintain **automation, playbooks, and systems** for timely triage, investigation, and incident response. - Develop and refine **high-signal detections** to minimize noise and maximize actionability. - Integrate **security telemetry and tooling** across cloud and application stacks for consistent investigations and self-service triage. - Lead cross-functional incident response across **applications, cloud infrastructure, endpoints, identity, and internal services**. - Translate incident data and response metrics into **secure-by-design improvements** with product and infrastructure teams. - Continuously evaluate response procedures and partner to close gaps and improve the operating model. --- ## **What we’re looking for** - Demonstrated capability in **security engineering, detection engineering, or incident response**. - Hands-on experience investigating security incidents or suspicious behavior in complex environments. - Practical experience with **EDR, SIEM, SOAR, log management**, or equivalent detection/response tooling. - Ability to write code and build automation/detections in at least one relevant **scripting or query language**. - Strong understanding of **modern cloud infrastructure** and **SaaS security** principles. - Sound **risk-based judgment** when prioritizing threats and operational tasks. - Ability to make **timely decisions with incomplete information** during active incidents. - Clear communication and cross-functional collaboration in high-pressure situations. --- ## **Preferred experience** - Building **self-serve security triage automation** or **AI-assisted response** capabilities. - Threat hunting, digital forensics, threat intelligence, or **infrastructure-as-code security controls**. - Investigating complex security events in **containerized/Kubernetes** environments. - Translati
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.