Detection and Response Platform Engineer

• Own and evolve core infrastructure powering detection and response workflows at scale
• Design and maintain security telemetry pipelines, including collection, normalization, enrichment, and retention of logs and events
• Own and evolve the execution environment and tooling for detections and response automation
• Manage dependencies and configuration, release processes, and runtime health monitoring
• Automate investigation and response workflows through integrations across security tools
• Establish engineering standards including clear interfaces, automated tests, code review, and extensible documentation
• Own platform operational health through metrics, alerting, and reliability-focused on-call responsibilities
• Explore emerging approaches, potentially leveraging AI, to reduce toil and strengthen security posture
• Maintain operational playbooks and procedures for platform health, diagnosis, and recovery

• 5+ years of experience in cloud infrastructure, platform/SRE, software engineering, or security engineering with a strong infrastructure focus
• Strong proficiency in Python
• Ability to write clean, maintainable, and testable code for production systems
• Hands-on experience operating production systems in AWS, Azure, or GCP
• Experience with IAM, networking, and logging/auditing
• Experience building and operating event/log pipelines and data workflows, streaming and/or batch
• Strong fundamentals in reliability and data quality
• Experience with infrastructure as code and deployment automation, such as Terraform/Pulumi and CI/CD
• Practical knowledge of detection and response concepts across cloud, identity, and endpoint environments
• Strong fundamentals in operating systems, networking, and troubleshooting distributed systems
• Excellent written communication skills
• Ability to create clear documentation and runbooks

Demonstrates expertise in cloud infrastructure and security engineering, with a strong focus on building and maintaining scalable detection and response workflows. Proficient in automation, operational health management, and the development of engineering standards for production systems.

• Cloud Infrastructure Experience
• Python Proficiency
• Event/Log Pipeline Management
• Infrastructure as Code (Terraform/Pulumi)
• Production Systems Operations

• Python
• Cloud Infrastructure
• Event/Log Pipelines
• Infrastructure as Code
• CI/CD
• IAM
• Networking
• Logging/Auditing
• Reliability Fundamentals
• Troubleshooting Distributed Systems

• Excellent Written Communication
• Documentation Skills

• Security Telemetry
• Detection and Response
• Operational Health
• Automation
• Monitoring

• AWS
• Azure
• GCP
• Terraform
• Pulumi