Senior Detection and Response Engineer (AI Security)

thinking machines lab • United State

Visa Sponsorship Relocation

Apply Now

AI Summary

Lead end-to-end detection and response for AI lab security, designing pipelines for threat telemetry, investigating incidents, and building threat intelligence to counter sophisticated adversaries targeting AI infrastructure and models. Collaborate with security, research, and product teams to scale defenses while owning incident response, automation, and proactive threat hunting. Requires hands-on experience in security data pipelines, incident response, and cloud/Kubernetes telemetry.

Key Highlights

Own end-to-end detection and response for AI lab security, including incident triage, containment, and postmortems

Design and operate security data pipelines for telemetry collection, normalization, enrichment, and storage

Build threat intelligence practice focused on AI-specific threats (e.g., model weight theft, prompt injection) and translate intel into detections and hardening

Key Responsibilities

Lead end-to-end incident response, including triage, scoping, containment, eradication, recovery, and blameless postmortems

Design, build, and operate security data pipelines for telemetry collection, normalization, enrichment, and storage from cloud, Kubernetes, identity, endpoint, and application sources

Author, deploy, and maintain high-fidelity detections across SIEM, endpoint, cloud, and security tooling

Build and run a threat intelligence practice tracking AI-specific adversaries (e.g., espionage, model weight theft) and translate intel into hunts, detections, and hardening recommendations

Proactively hunt for threats across the environment and develop automation/response tooling to shorten time-to-detect-and-respond

Collaborate with researchers and product teams to detect AI-specific threats in production

Develop and exercise incident response plans, on-call processes, and tabletop exercises with engineering, research, legal, and leadership

Participate in on-call pager rotation for security incidents

Looking to advance your Cyber Security career with relocation support? Explore Cyber Security Jobs with Relocation Packages that include comprehensive packages to help you move and settle in your new role.

Technical Skills Required

Python Security Data Pipelines Incident Response

Benefits & Perks

Generous health, dental, and vision benefits

Unlimited paid time off (PTO)

Paid parental leave

Discover our full range of relocation jobs with comprehensive support packages to help you relocate and settle in your new location.

Nice to Have

Detection and response experience at an AI lab, cloud provider, or high-threat environment

Experience detecting AI-specific abuse (e.g., prompt injection, model extraction, anomalous API usage)

Familiarity with ML infrastructure telemetry (e.g., GPU clusters, training jobs, model artifact storage)

Experience with stream processing (e.g., Kafka, Flink, Vector) and cost-aware log management

Malware analysis or reverse engineering experience

Open-source detection content or published threat research

Job Description

We’re looking for a detection and response engineer to build how we find, investigate, and stop threats against our company, platforms, models, and data. You’ll own the pipelines that turn raw telemetry into high-fidelity detections, lead the response when real incidents happen, and run a threat intelligence practice that keeps our defenses focused on the adversaries who actually target frontier AI labs. You’ll partner closely with security, infrastructure, research, and product teams so that detection and response scale with the company instead of slowing it down.

What You’ll Do

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.