Engineer, test, and deploy detection logic across cloud and enterprise environments, treating detections as software with version control, peer review, and measurable performance.

Build and maintain incident response automation, runbooks, and tooling that reduce containment timelines without sacrificing developer velocity.

Mature telemetry pipelines through improved schema design, normalization, enrichment, and quality checks that reduce false positives and increase signal fidelity.

Perform digital incident investigations to identify and contain potential security breaches.

Conduct digital forensics and malware analysis to understand attack vectors and adversary methodologies.

Integrate alerting with messaging and ticketing systems to enable fast, traceable response workflows.

Partner cross-functionally with IT, security, and engineering teams to harden identity and access patterns, close logging and forensics gaps, and implement maintainable guardrails that scale with the organization.

Utilize threat intelligence platforms to improve hunting, detection, and response workflows.

Clearly explain the significance and impact of incidents, providing actionable recommendations to both technical and non-technical stakeholders.

Ideally, you d have:

5+ years of experience in Detection Engineering, Incident Response, or Security Operations, with a strong emphasis on building and shipping security tooling and automation.

Proficiency in at least one programming language (e.g., Python, Go) and comfort writing production-grade code — not just scripts.

Security Engineer, Detection & Response

Responsibilities

Qualification

Required

Benefits

Company

Scaleai

More roles at Scaleai