Senior/Lead Security Engineer (Detection & Response)

Fuse Energy

About The Position

Fuse is an AI-first energy company working to make energy abundant and affordable. It is building an integrated energy business spanning generation projects, hardware, grid infrastructure, real-time power trading and distributed energy for homes. The Senior/Lead Security Engineer (Detection & Response) will build and own security monitoring and detection across Fuse’s IT and cloud environment, including AWS, identity, endpoints, SaaS, networks and data center infrastructure. The role covers the detection lifecycle end to end: anticipating compromise scenarios, ensuring sufficient telemetry, creating detections and response workflows, and improving coverage. The engineer will lead investigations and incident response, automate recurring security work, and collaborate with IT and Engineering to address underlying issues. The role also includes developing incident response playbooks and internal AI agents and security bots to support monitoring, investigations, reporting and other security operations.

Requirements

Significant hands-on experience in detection engineering, security engineering, incident response, threat hunting or a similar technical role.
Strong understanding of cloud environments, ideally AWS, and monitoring them for unauthorized or suspicious activity.
Strong networking fundamentals and understanding of how attackers move through networks and systems.
Strong understanding of attacker tradecraft and ability to turn it into useful, high-signal detections.
Experience investigating real security incidents and taking ownership through to resolution.
Strong scripting or programming skills, ideally Python, and a habit of automating repetitive work.
Experience with security monitoring and response tools such as SIEM, EDR, SOAR or equivalent.
Strong systems thinking and an instinct for asking how to detect whether a system has been compromised.
Comfort working autonomously and closely with IT and Engineering teams.
Curiosity about emerging AI capabilities and initiative in experimenting with AI-assisted development, automation and security workflows.

Nice To Haves

Experience with AWS security telemetry, including CloudTrail, GuardDuty, VPC Flow Logs and IAM.
Experience with detection-as-code, Sigma, Git-based detections and automated testing.
Experience with CrowdStrike, SentinelOne, Defender or another EDR.
Experience with network security monitoring, PCAP, NetFlow/sFlow or firewall telemetry.
Experience with digital forensics, threat intelligence, purple teaming or security validation.
Experience with data center or colocation security, including OOB networks and BMC/IPMI.
Experience with security automation, AI-assisted development or applying AI/LLMs to security engineering and operations.
Experience in energy, trading, fintech, critical infrastructure or other high-value-target environments.

Responsibilities

Own security monitoring and detection across AWS, identity, endpoints, SaaS, networks and data center environments.
Build and maintain telemetry and logging pipelines for detecting security incidents, and continuously test and improve detection coverage.
Lead security investigations and incident response from detection through containment, recovery and post-mortem.
Proactively hunt for threats and identify gaps in visibility, controls and detection coverage.
Build automation to improve detection, investigation and response, using AI and emerging tools to improve efficiency and capabilities.
Work with IT and Engineering to turn security findings into preventative controls and better system design.
Develop and test incident response playbooks and continuously improve response capability.
Implement and enhance internal AI agents and security bots that assist with monitoring, investigations, reporting and other security operations.