Staff Detection & Response Engineer

Join Kikoff, a consumer fintech startup, as a Staff Detection & Response Engineer. In this role, you will own the Detection & Response pillar, defining the detection strategy and driving the program from "we have tools" to "we have coverage we can prove." You will design and maintain detection coverage across various platforms, write detections as code, and own the incident response lifecycle. This is a unique opportunity to have real ownership and impact in a fast-paced startup environment.

• Own and dictate the detection and response roadmap, defining the detection strategy and driving the program from "we have tools" to "we have coverage we can prove."
• Design and maintain detection coverage across various platforms, including AWS, endpoints, identity, SaaS, and CI/CD, while writing detections as code.
• Lead the incident response lifecycle, including triage, containment, forensics, postmortem, and remediation tracking, while automating response where it's safe.

• Strong command of Cloud Native logging and detection surfaces
• You've written detections yourself: SIEM rules, or detection-as-code pipelines, and you've owned the false positive rate that came with them
• Hands-on incident response experience. You've led real incidents, not just participated in them
• Experience with EDR at fleet scale and identity-based detection
• Fluency in at least one language for automation (Python, Go, Ruby, or similar)
• Comfortable in a fintech regulated environment
• 6+ years in security with meaningful detection engineering and incident response experience in cloud-native environments (AWS strongly preferred)
• You've stood up a detection program from scratch or near-scratch
• Detections for AI/LLM and agentic system abuse
• Insider threat and unauthorized access investigation experience
• Consumer fintech or financial services background