Staff Detection & Response Engineer

Typeface•Palo Alto, CA

7h•$210,000 - $240,000•Hybrid

About The Position

Typeface is hiring a Staff Detection & Response Engineer to lead how the company detects, responds to, and recovers from security incidents across its platform. The role owns the end-to-end incident lifecycle, from the initial alert through root-cause analysis and lasting remediation, helping protect the brands, content, and data of enterprise customers. The engineer will also build the systems, playbooks, and automation that make incident response faster and more effective at a growing AI company. This is a hybrid role based in Palo Alto, California, with in-office collaboration three days a week.

Requirements

10 or more years of experience in incident response, security operations, or digital forensics, with a strong track record of leading investigations end to end.
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
Hands-on experience with cloud security in AWS, Azure, or GCP and with SIEM, EDR, and SOAR tools.
Strong understanding of attacker techniques and frameworks such as MITRE ATT&CK and NIST incident handling.
Scripting skills in Python, PowerShell, or Bash to automate investigation and response tasks.
Excellent communication skills and the ability to stay calm, work independently, and lead in collaborative teams.
Experience supporting B2B or enterprise SaaS products.

Nice To Haves

Background securing AI or generative AI systems.
Industry certifications such as GCIH, GCFA, GCIA, or CISSP.

Responsibilities

Lead end-to-end responses to security incidents, including detection, triage, containment, eradication, recovery, and post-incident review.
Investigate alerts and suspicious activity across cloud infrastructure, endpoints, identity systems, and SaaS applications.
Build and maintain incident response playbooks, runbooks, and escalation paths.
Perform log analysis, digital forensics, and threat hunting to identify root causes and emerging risks.
Automate detection and response workflows to reduce time to detect and time to resolve.
Coordinate incident response with Engineering, Product, IT, Legal, and Customer teams, and communicate clearly with stakeholders.
Run tabletop exercises and drive continuous improvement of security posture and readiness.
Mentor and support teammates and help foster a blameless, security-first culture.