Staff Security Engineer (Detection & Response)

Join our team as a Staff Security Engineer (Detection & Response) and take ownership of our Incident Detection and Response program. You will be responsible for threat modeling our systems and codebase, directing investigations when incidents occur, and finding bugs in our code and gaps in our SDLC. You will work closely with an AppSec-focused engineer and an infrastructure-focused engineer, guiding technical direction and judgment calls. Additionally, you will help us understand and manage the security risks associated with our growing use of AI and LLMs.

• Diriger le programme de détection et de réponse aux incidents, y compris la modélisation des menaces de nos systèmes et de notre code.
• Participer activement à la recherche de bugs dans notre code et à l'identification des lacunes dans notre cycle de vie de développement logiciel.
• Diriger les enquêtes en cas d'incident ou de constatation suspecte, en analysant les journaux et en construisant la narration de ce qui s'est passé.

• Strong communication skills, with enough credibility to direct an investigation and influence peers informally
• Experience building threat models of codebases, reasoning about attack surface, trust boundaries, and data flow well enough to anticipate where problems will emerge
• Comfortable reading production code across multiple languages and stacks well enough to judge whether a finding is actually exploitable
• 6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM engineering ownership
• A track record of finding and fixing systemic weaknesses, whether they surfaced through an incident or through your own proactive review
• Hands-on experience with AI-assisted security operations tooling, such as AI SOC platforms, LLM-based triage, or agentic escalation systems
• Interest or experience in securing AI and LLM-powered systems, including risks like prompt injection, model misuse, or agentic tool abuse
• Prior exposure to golden-path or secure-by-default infrastructure initiatives, even in a supporting role
• Experience with container or image security and the patching lifecycle
• A relevant certification such as GCIH, GCFA, GCDA, OSCP, or CISSP