Detection and Response Engineer

Benchling • San Francisco, CA

1d • $136,000 - $166,000 • Hybrid

About The Position

As a Security Response Engineer at Benchling, you will join a team responsible for building a best-in-class security program from the ground up. Our focus is on providing value to the organization by emphasizing real-world security and embracing automation and AI. We’re looking for engineers who are excited to apply their expertise to our mission of securing some of society's most sensitive data. Benchling is the AI platform for biotech R&D. Scientists use Benchling to design experiments, capture structured data, and run AI agents and models directly in their workflows. Over 200,000 scientists around the world trust Benchling to power their most important work, from academic labs to Sanofi, Moderna, and more than half of the world's top 50 biopharma. We’re building an AI scientist for our customers. We can’t do that if we haven’t built the muscle ourselves. AI fluency is the foundation we build on; it's core to how we work, and we're committed to helping every new hire integrate it into their day-to-day. As part of our interview process, you'll complete a brief AI-focused exercise or discussion so we can understand how you think about and use AI to drive impact in your role. Feel free to reference any tools, platforms, or workflows you use today.

Requirements

• 1+ years experience in Detection and Response (Detection Engineering, Digital Forensics, Incident Response).
• Strong communicator with both words and data - you have experience communicating to a wide variety of stakeholders under varying conditions.
• Experience as an incident responder responsible for leading multi-team incidents.
• Technical innovation skills (you enjoy finding technical solutions, learning new technology, evangelizing security and privacy).
• Ability to move forward projects in ambiguous situations through influence and not authority.
• Practical experience with attacker tactics, techniques, and procedures.
• Comfortable with complexity in the short term but can build towards simplicity in the long term.
• Some experience with cloud environments and automation.
• Relevant development experience in at least one scripting language, preferably Python.

Responsibilities

• Investigating security events across the organization using your experience and knowledge in multiple security domains (log analysis, digital forensics, or malware analysis).
• Creating, deploying and maintaining high signal threat detections based on your understanding of threat actor TTPs.
• Enhancing incident response processes through documentation and research into best practices
• Coordinating multi-functional incident response during security incidents, assisting partner teams during non-security incidents
• Researching new detection mechanisms for attack vectors and techniques relevant to our space and presenting findings to both internal and external audiences.
• Evaluating external tooling, developing new automation and tooling.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed