Staff Detection Engineer

Fluidstack•New York, NY

23h•$269,000 - $330,000

About The Position

Fluidstack is building civilization-scale infrastructure for AI, focusing on delivering massive amounts of compute power faster than anyone else. This involves rethinking every layer of the stack, from acquiring power to operating data centers, with teams spanning hardware and software. The company values extreme ownership, velocity, first principles thinking, and a passion for the AI frontier. The Security & Corp IT Team protects the people, systems, and infrastructure behind this large-scale AI compute buildout. Key problems the team addresses include building comprehensive detection and response coverage across cloud, endpoint, and identity telemetry, running incident response end-to-end, implementing detection-as-code pipelines, and hardening corporate IT foundations.

Requirements

8+ years in security operations, detection engineering, or incident response, with experience at a high-growth tech company, cloud-native infrastructure provider, or top-tier MDR/threat intel firm.
Proven experience building or scaling a detection engineering function, including the program, pipeline, and coverage.
Deep hands-on experience writing detections against cloud telemetry (AWS, GCP, or Azure control plane and audit logs) and endpoint telemetry (EDR event streams, OS-level signals).
Strong scripting and automation skills in Python or similar, capable of building and maintaining detection-as-code pipelines.
Incident response experience at a company operating at significant scale, including leading response under pressure and implementing postmortem-driven changes.
Ability to operate as a technical lead, setting direction, making decisions, and executing work.
Proficiency in working across corporate IT and infrastructure teams in a fast-moving environment to acquire telemetry and implement fixes.

Nice To Haves

Experience securing GPU clusters, HPC environments, or physical data center infrastructure.
Contributions to open-source detection content (Sigma, community rule sets).

Responsibilities

Build the detection engineering function from the ground up, including telemetry pipelines, detection content, alert routing, and response runbooks, with coverage defensible against a threat model.
Own detection-as-code end to end, writing detections across cloud and endpoint sources with tests, version control, and CI.
Lead incident response for high-severity events, driving containment and root cause analysis, and updating detections based on incident learnings.
Drive automation of triage and enrichment in Python (or similar) to scale alert volume efficiently.
Partner directly with leadership on security strategy, translating threat landscape and detection gaps into a prioritized roadmap with clear tradeoffs.
Work across corporate IT and infrastructure teams to obtain necessary telemetry, logging, and access, and to address root causes identified by detections.