Security Engineer (Detection and Response)

Join WRITER's security team as a staff detection and response engineer. In this role, you will build sophisticated detection systems to identify attacks targeting our AI platform and create automated response capabilities. You will be the operational arm of our security function, translating threat intelligence into real-time detections, coordinating incident response, and hunting for sophisticated attacks. This position requires strong programming skills, experience with SIEM platforms, and a self-directed execution mindset.

• Design and implement detection strategies that identify AI-specific threats, build automated response playbooks, and lead security incident response coordination across all teams.
• Hunt proactively for sophisticated threats across GPU clusters and training infrastructure, build detection-as-code frameworks, and collaborate cross-functionally as the operational security partner for all teams.
• Maintain 24/7 on-call rotation for critical AI security incidents, responding to real-time threats targeting our platform while continuously improving detection coverage and automation capabilities.

• Deep alignment with WRITER's values – you naturally Connect across security, infrastructure, and AI research teams to build comprehensive defenses, you Challenge assumptions about what's possible in AI security engineering, and you Own the protection of our AI platform with unwavering accountability and a commitment to staying ahead of evolving threats
• 3-5+ years in security operations, detection engineering, or incident response with a proven track record of identifying and stopping sophisticated attacks in production environments, specifically securing AI/ML infrastructure, high-performance computing environments, or other distributed systems at scale
• Strong programming skills in Python, KQL, SPL, or similar languages that allow you to build custom detection logic, automate response workflows, and create tools that operationalize security at scale across cloud-native and distributed computing environments
• Experience with SIEM platforms, detection technologies, and forensic investigation techniques with demonstrated ability to build detection for novel attack techniques that don't have established patterns yet and to conduct forensics in complex distributed environments
• Self-directed execution mindset with a track record of securing high-value intellectual property, automating incident response in complex environments, and identifying critical security gaps through proactive threat hunting before they become incidents