Security Operations & Detection Engineer (SecOps) – AI Cloud
About The Position
Bitdeer is seeking a hands-on Security Operations & Detection Engineer to join their AI Cloud Security team on the SecOps line. This role, based in Los Angeles, focuses on real-time security alert monitoring, triage, incident response, and active detection engineering across AI Cloud’s production estate, which includes GPU/AIDC infrastructure, the core cloud platform, and public-facing services. This is a technical, hands-on operations and engineering role, not a policy or management position, working regular US Pacific daytime hours with close collaboration with the global security team.
Requirements
- 3+ years of hands-on experience in a SOC, Incident Response (IR), or Detection Engineering role, with comfort acting as the primary on-shift responder.
- Strong Linux and Kubernetes fundamentals; comfortable operating across cloud platforms and bare-metal/GPU environments.
- Practical SIEM query experience (OpenSearch, Splunk DSL, or similar) and scripting skills in Python or Go.
- Direct experience with host-based detection tools (Falco, Wazuh, auditd), log analysis, and standard IR tooling.
- Willingness and ability to participate in a weekend on-call rotation.
Nice To Haves
- Hands-on incident response experience with crypto-mining malware or supply-chain security incidents.
- Exposure to eBPF-based detection or runtime security tools (e.g., Tetragon, Falco internals).
- Familiarity with high-performance computing environments (NVIDIA DGX/HGX, InfiniBand, or RoCE networking).
- Professional fluency in Mandarin to facilitate day-to-day collaboration with the Singapore engineering site (English is required).
- Industry certifications such as GCIH, GCIA, or CISSP are a plus.
Responsibilities
- Perform on-shift triage, containment, escalation, and post-incident writeups for P1/P2 security incidents across GPU/AIDC infrastructure, cloud platform, and public services.
- Consistently meet team SLAs for critical incidents (P1 acknowledgment within <= 15 minutes, response start within <= 30 minutes).
- Continuously tune and build alert rules within our self-built SIEM, HIDS, and WAF telemetry to suppress false positives and keep paging high-signal.
- Contribute to building and refining agentic triage workflows to automate routine responses and reduce noise.
- Conduct daily written and live handoffs with the Singapore security team to ensure seamless global operations across shifts.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
