Senior Detection and Response Engineer

About 1X

We’re building humanoid robots that work in home - doing the chores, handling the tasks, and giving people their time back. Simple, but it’s not.

To do this right, we have to solve robotics, AI, manufacturing - at the same time, at scale, in a form factor that has to be safe enough to live with your family. If you’re inspired by this, you’ll thrive here. We’ve been at this since 2014 and we’re at the point where the hard problems are behind us and the hard work is in front of us.

NEO is our flagship - a home robot designed to move, learn, and operate in the real world alongside real people. We’re not demoing it - we’re shipping it. We’re excited to meet you, if this excites you.

If you’ve spent your career working on problems that matter and want to see them actually reach the world - this is that moment. We’re scaling, we’re hiring with intention, and we need people who want to build something that will genuinely change how humans spend their time - safely creating abundance for all.

The Security Engineering team protects the infrastructure, cloud environments, robotics platforms, enterprise systems, and operational technology that power 1X. We partner closely with Infrastructure, AI, Robotics, Manufacturing, and Enterprise Engineering teams to proactively identify threats, improve resiliency, and secure embodied AI systems at scale.

The Detection & Response function is responsible for building the monitoring, investigation, and incident response capabilities that protect 1X’s rapidly growing operational and engineering environments.

Build and scale detection engineering, threat monitoring, and incident response capabilities across 1X’s cloud, enterprise, robotics, and infrastructure environments. This role is critical to improving organizational visibility, accelerating response capabilities, and proactively defending the systems that support humanoid robotics development and deployment.

• Design and implement scalable detection engineering capabilities across cloud infrastructure, endpoints, enterprise systems, and operational environments
• Improve incident response readiness through automation, threat hunting, telemetry enrichment, and operational playbook development
• Build high-signal monitoring pipelines and security analytics that improve visibility into adversarial behavior and operational risk
• Partner cross-functionally with Infrastructure, IT, Robotics, and Product Security teams to strengthen detection coverage and response coordination
• Reduce mean time to detect and respond by improving alert quality, investigation tooling, and operational response workflows

• Strong hands-on experience in detection engineering, incident response, or security operations
• Deep understanding of cloud security, endpoint telemetry, identity systems, and infrastructure monitoring
• Experience building detections using SIEM, EDR, and security analytics platforms
• Strong scripting and automation skills using Python, Go, Bash, or similar languages
• Excellent analytical, investigative, and operational problem-solving abilities

• 5+ years of experience in detection engineering, incident response, threat hunting, security operations, or related security engineering roles
• Experience with SIEM, EDR, logging pipelines, cloud monitoring, and security telemetry systems
• Strong understanding of cloud environments such as AWS, GCP, or Azure
• Experience developing automation workflows, response tooling, or detection logic using scripting/programming languages
• Bachelor’s degree in Computer Science, Information Security, Engineering, or related technical field

• Experience supporting robotics, manufacturing, operational technology (OT), or hardware engineering environments
• Familiarity with MITRE ATT&CK, threat intelligence workflows, and adversary emulation methodologies
• Experience with Kubernetes security, infrastructure monitoring, and distributed systems environments
• Exposure to zero trust architectures, identity systems, and security orchestration tooling
• Experience operating in high-growth startup environments