Security Operations & Detection Engineer (SecOps) – AI Cloud

Bitdeer Technologies Group • San Jose, CA

1d • Onsite

About The Position

Bitdeer is seeking a hands-on Security Operations & Detection Engineer to join its AI Cloud Security team on the SecOps line. Based in Los Angeles, the role focuses on real-time security alert monitoring, triage, incident response, and detection engineering across AI Cloud’s production estate, including GPU/AIDC infrastructure, the core cloud platform, and public-facing services. It is a technical operations and engineering role, rather than a policy or management position, and works regular US Pacific daytime hours in close collaboration with the global security team.

Requirements

• At least 3 years of hands-on experience in a SOC, Incident Response, or Detection Engineering role.
• Comfort acting as the primary on-shift responder.
• Strong Linux and Kubernetes fundamentals, with the ability to work across cloud platforms and bare-metal/GPU environments.
• Practical SIEM query experience, such as OpenSearch, Splunk DSL, or similar.
• Scripting skills in Python or Go.
• Direct experience with host-based detection tools such as Falco, Wazuh, or auditd, as well as log analysis and standard incident-response tooling.
• Willingness and ability to participate in a weekend on-call rotation.
• English is required.

Nice To Haves

• Hands-on incident response experience with crypto-mining malware or supply-chain security incidents.
• Exposure to eBPF-based detection or runtime security tools, such as Tetragon or Falco internals.
• Familiarity with high-performance computing environments, including NVIDIA DGX/HGX, InfiniBand, or RoCE networking.
• Professional fluency in Mandarin to facilitate day-to-day collaboration with the Singapore engineering site.
• Industry certifications such as GCIH, GCIA, or CISSP.

Responsibilities

• Perform on-shift triage, containment, escalation, and post-incident writeups for P1/P2 security incidents across GPU/AIDC infrastructure, the cloud platform, and public services.
• Meet team SLAs for critical incidents, including acknowledging P1 incidents within 15 minutes and starting a response within 30 minutes.
• Build and continuously tune alert rules in the self-built SIEM, HIDS, and WAF telemetry to suppress false positives and maintain high-signal paging.
• Contribute to building and refining agentic triage workflows to automate routine responses and reduce alert noise.
• Conduct daily written and live handoffs with the Singapore security team to support seamless global operations across shifts.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed