Staff Detection Engineer

Fluidstack • Austin, TX

4d • $224,000 - $344,000

About The Position

Fluidstack is hiring a Staff Detection Engineer to build its detection engineering function from the ground up as part of the Security & Corp IT team. The team protects the people, systems, and infrastructure behind Fluidstack’s AI compute buildout, spanning corporate IT and large-scale data center infrastructure.

The role owns telemetry pipelines, detection content, alert routing, and response runbooks, with coverage grounded in a defensible threat model. It includes building detection-as-code across cloud and endpoint sources, leading high-severity incident response, automating triage and enrichment, and working with leadership to shape security strategy. The engineer will also partner with corporate IT and infrastructure teams to obtain necessary telemetry and access, and to address root causes identified through detection work.

Requirements

• At least 8 years of experience in security operations, detection engineering, or incident response.
• Experience at a high-growth technology company, cloud-native infrastructure provider, or top-tier MDR/threat intelligence firm.
• Experience building or scaling a detection engineering function, including its program, pipeline, and coverage.
• Deep hands-on experience writing detections against cloud telemetry, such as AWS, GCP, or Azure control-plane and audit logs, and endpoint telemetry, such as EDR event streams and OS-level signals.
• Strong scripting and automation skills in Python or a similar language, including the ability to build and maintain detection-as-code pipelines.
• Incident response experience at a company operating at significant scale, including leading response under pressure and producing postmortems that changed company practices.
• Ability to act as a technical lead, set direction, make decisions, and perform hands-on work without heavy management overhead.
• Ability to collaborate with corporate IT and infrastructure teams in a fast-moving environment and secure telemetry and fixes through effective advocacy.

Nice To Haves

• Experience securing GPU clusters, HPC environments, or physical data center infrastructure.
• Contributions to open-source detection content, such as Sigma or community rule sets.

Responsibilities

• Build the detection engineering function, including telemetry pipelines, detection content, alert routing, and response runbooks.
• Develop and own detection-as-code across cloud and endpoint sources, including tests, version control, and CI.
• Lead incident response for high-severity events, driving containment and root-cause analysis, and improve detections based on incident findings.
• Automate alert triage and enrichment in Python or a similar language.
• Partner with leadership on security strategy and translate threat landscape and detection gaps into a prioritized roadmap with clear tradeoffs.
• Work with corporate IT and infrastructure teams to secure telemetry, logging, and access, and remediate underlying issues surfaced by detections.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed