Detection and Response Engineer

Benchling • San Francisco, CA

1d • Hybrid

About The Position

We are rebuilding biotech for the AI era.

When a breakthrough is delayed, the world waits. Getting a molecule from discovery to patients, or a crop from lab to field, involves thousands of slow, manual, disconnected steps. AI has the potential to change this, compressing decades of R&D work into years. But that only happens when clean, structured scientific data and AI are built into how science gets done.

Benchling is the AI platform for biotech R&D. Scientists use Benchling to design experiments, capture structured data, and run AI agents and models directly in their workflows. Over 200,000 scientists around the world trust Benchling to power their most important work, from academic labs to Sanofi, Moderna, and more than half of the world's top 50 biopharma.
ROLE OVERVIEW
As a Security Response Engineer at Benchling you’ll be joining a team responsible for building a best-in-class security program from the ground up. Our focus is on providing value to the organization by emphasizing real world security and embracing automation and AI. We’re looking for engineers who are excited to apply their expertise to our mission of securing some of society's most sensitive data.

Requirements

• 1+ years experience in Detection and Response (Detection Engineering, Digital Forensics, Incident Response).
• Strong communicator with both words and data - you have experience communicating to a wide variety of stakeholders under varying conditions.
• Experience as an incident responder responsible for leading multi-team incidents.
• Technical innovation skills (you enjoy finding technical solutions, learning new technology, evangelizing security and privacy).
• Ability to move forward projects in ambiguous situations through influence and not authority.
• Practical experience with attacker tactics, techniques, and procedures.
• Comfortable with complexity in the short term but can build towards simplicity in the long term.
• Some experience with cloud environments and automation.
• Relevant development experience in at least one scripting language, preferably Python.

Responsibilities

• Investigating security events across the organization using your experience and knowledge in multiple security domains (log analysis, digital forensics, or malware analysis).
• Creating, deploying and maintaining high signal threat detections based on your understanding of threat actor TTPs.
• Enhancing incident response processes through documentation and research into best practices
• Coordinating multi-functional incident response during security incidents, assisting partner teams during non-security incidents
• Researching new detection mechanisms for attack vectors and techniques relevant to our space and presenting findings to both internal and external audiences.
• Evaluating external tooling, developing new automation and tooling.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed