Security Engineer, Detection & Response

Brain Co. • San Francisco, CA

1d

About The Position

Brain Co. is seeking a Security Engineer, Detection & Response to build and operate detection and response capabilities as the company expands. Reporting directly to the Head of Security, this engineering-focused builder will work with engineering, infrastructure, infrastructure security, IT, and operational teams to protect environments and respond to security incidents. The role focuses on designing high-signal detections, automating triage and investigation workflows, leading cross-functional incident response, and translating incident findings into safer engineering defaults. The program is at an early stage, giving the engineer significant autonomy to shape its tooling, workflows, metrics, and operating model. The role includes participation in a regular on-call rotation for critical security incidents.

Requirements

• Demonstrated capability in security engineering, detection engineering, or incident response.
• Hands-on experience investigating security incidents or suspicious behavior in complex environments.
• Practical experience with EDR, SIEM, SOAR, log-management, or equivalent detection-and-response tooling.
• Ability to write code and build software automation or detections in at least one relevant scripting or query language.
• Strong understanding of modern cloud infrastructure and SaaS security principles.
• Sound risk-based judgment when prioritizing threats and operational tasks.
• Ability to make sound, timely decisions with incomplete information during active incidents.
• Clear communication and cross-functional collaboration skills during high-pressure situations.

Nice To Haves

• Experience building self-serve security triage automation or AI-assisted response capabilities.
• Experience in threat hunting, digital forensics, threat intelligence, or infrastructure-as-code security controls.
• Experience investigating complex security events in containerized or Kubernetes-based cloud environments.
• Experience translating security incident trends into architectural or systemic engineering improvements.
• Experience navigating security challenges in fast-paced, high-growth startup environments.

Responsibilities

• Design, build, and maintain automation, playbooks, and systems for timely triage, investigation, and incident response, applying sound software engineering practices and modern AI tools where useful.
• Develop and refine high-signal detections so findings are actionable and noise is minimized.
• Integrate security telemetry and tooling across the cloud and application stack to enable consistent investigation and self-service triage.
• Lead cross-functional incident response across applications, cloud infrastructure, endpoints, identity, and internal services.
• Use incident data and response metrics to drive secure-by-design improvements with product and infrastructure teams.
• Evaluate response procedures and collaborate across engineering, infrastructure security, IT, and operational teams to close gaps and improve the operating model.
• Participate in a regular on-call rotation to support rapid response to critical security incidents and maintain operational resilience.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed