Security Engineer, Detection and Response - San Francisco, CA

Join our dynamic Security Engineering team as a Senior Security Engineer specializing in Detection and Incident Response. In this pivotal role, you will blend the realms of security operations and software engineering, not only investigating incidents but also developing the systems that detect, contain, and prevent them. Your contributions will involve designing and deploying high-precision detection mechanisms across cloud services and enterprise SaaS platforms, crafting automation to expedite response times, and enhancing telemetry pipelines essential for robust security measures.Your expertise in coding will be as vital as your incident triaging skills. You will structure investigations, analyze root causes, and clearly communicate the implications of security incidents to both technical and non-technical stakeholders. Additionally, you'll leverage these insights to drive lasting engineering improvements, resulting in better detections and smarter automation.

Role Overview Pinterest is hiring a Security Software Engineer II focused on Detection and Response. This role can be based in San Francisco, CA or remote within the US. What You Will Do Develop and refine detection strategies to identify security threats across the Pinterest platform. Implement and improve response protocols to address incidents efficiently. Work closely with teams from different disciplines to spot vulnerabilities and strengthen defenses. Support efforts to reduce incident response times and protect the safety of Pinterest’s user community. Location This position is open to candidates in San Francisco, CA or remote within the United States.

About Our TeamAt OpenAI, our Security organization is dedicated to fostering safe and responsible innovation on a global scale. As our systems, infrastructure, and research capabilities expand, we are committed to investing in top-tier security measures that protect our people, products, and users while maintaining our momentum in progress.Our team is focused on safeguarding OpenAI’s environments by developing sophisticated detection systems, enhancing real-time response capabilities, scaling telemetry and logging infrastructure, and providing actionable threat intelligence to proactively counter adversaries.About the RoleWe are on the lookout for a Global Detection and Response Lead who will take ownership of and enhance OpenAI’s cybersecurity detection and response operations. In this pivotal role, you will establish the strategy and oversee the execution of security monitoring, incident response, recovery, and post-incident enhancements across our global infrastructure.As a hands-on leader with substantial technical credibility and acute operational instincts, you will build and mentor high-performing teams, collaborate closely with Infrastructure, Research, Product Security, Enterprise Security, IT, and Engineering to ensure that detection and response capabilities are integrated into the systems that drive OpenAI.This role demands strategic thinking combined with practical leadership skills, requiring deep technical expertise, operational discipline, and the ability to cultivate high-performing teams in a dynamic environment.Key Responsibilities:Lead global detection and response operations, ensuring continuous monitoring, triage, investigation, containment, and remediation of security incidents across diverse networks and infrastructures.Mentor and manage several teams of senior engineers focused on observability, detection and response, and threat intelligence, strategically expanding these functions as OpenAI’s computational capacity and platform aspirations grow.Ensure exceptional operational readiness through management of incident response playbooks, on-call procedures, escalation protocols, and ongoing enhancements to response efficacy and agility.Enhance detection effectiveness by collaborating with engineering teams to ensure essential telemetry is accessible, reliable, and actionable across cloud, corporate, and production environments.Work collaboratively across all departments to assess and address emerging security challenges and risks.

About Our TeamAt OpenAI, our commitment to security is integral to our mission of ensuring that artificial general intelligence serves the betterment of humanity.Our dedicated Security team safeguards OpenAI's innovative technology, workforce, and products. We emphasize a technical yet operational approach, supporting all research and products across the organization. Our core principles include prioritizing impactful security measures, empowering researchers, preparing for future technologies, and cultivating a robust security culture.About This OpportunityAs a Security Engineer specializing in Detection and Response, you'll collaborate with our talented engineers and researchers to build, manage, and secure groundbreaking AI technologies. Your role will encompass all facets of Detection & Response, contributing as a versatile generalist within the Security team. Key responsibilities include:Lead initiatives across various security domains including Application Security, Infrastructure Security, Offensive Security, and Detection and Response.Innovate solutions to address emerging security challenges.Collaborate on pioneering AI research and leverage AI to enhance OpenAI’s security posture.This position may be based in San Francisco, CA, Seattle, WA, or New York City, NY. We adopt a hybrid work model, requiring three days in the office per week, and provide relocation assistance for new hires.Your Contributions Will Include:Innovating and enhancing Detection and Response infrastructure.Developing tools for the management of detection rule lifecycles.Creating, measuring, and refining detection rules for effective and sustainable operations.Automating manual response workflows.Ensuring visibility and management of OpenAI’s endpoint fleet (macOS, Windows).Driving advancements in identity access management (IAM), device management, and our utilization of public cloud services (e.g., AWS, Microsoft Azure).You Will Excel in This Role If You Have:Experience in cybersecurity or a related field.Familiarity with Microsoft Azure and/or other cloud infrastructure platforms.Strong problem-solving skills and a passion for security innovation.

About Scribd:At Scribd Inc., we ignite curiosity and foster a vibrant ecosystem of stories and knowledge. Our mission is to democratize access to ideas and empower collective wisdom through our innovative platforms: Everand, Scribd, Slideshare, and Fable. Join us as we create an inclusive environment where creativity and collaboration thrive.We believe in cultivating a culture where authenticity and boldness flourish—encouraging open discussions and commitment to our goals while embracing the unexpected. Every team member is empowered to prioritize customer needs and take meaningful actions.Our flexible work policy, Scribd Flex, enhances individual work styles while fostering community connections. We encourage team members to collaborate intentionally through in-person moments, regardless of their location.We're looking for team members who embody "GRIT"—a blend of passion and perseverance towards long-term objectives. We seek individuals who can set and achieve Goals, deliver Results, offer Innovative solutions, and positively impact the Team's culture through collaboration.Role OverviewAs a Senior Security Engineer on our Infrastructure Security team, you'll play a crucial role in safeguarding our applications, platforms, and users. As we scale, we're enhancing our Detection & Response capabilities, transitioning towards a time-based security model that prioritizes speed, signal quality, and resilience as core design principles.

Join Klaviyo as a Senior Security Engineer specializing in Detection and Response. In this critical role, you will be at the forefront of safeguarding our systems and data, ensuring our clients' security. Collaborate with talented professionals in a dynamic environment where your expertise will directly impact our security posture.

At Discord, we empower over 200 million users each month to connect, communicate, and collaborate in their gaming experiences. With more than 90% of our users engaging in video games, our platform serves as a vital hub for gaming communities. Our mission is to enhance the social aspect of gaming by enabling seamless interactions among players before, during, and after gameplay.Discord is dedicated to fostering a sense of belonging for all users. Our commitment to security and privacy ensures that communications remain safe and confidential, which is essential to our continued success.We are on the lookout for a talented Senior Detection and Response Engineer to join our dynamic Detection & Response Team (DART). Our team is focused on engineering innovative detection systems, automating response processes, and developing tools to proactively combat threats rather than merely responding to them. If you are passionate about security and enjoy transforming investigative insights into robust automated solutions, we would love to hear from you!

Role overview Benchling is looking for a Detection and Response Engineer in San Francisco, CA. This role focuses on protecting company systems and applications from security threats. The engineer will use experience in incident response and threat detection to help maintain strong security and system integrity.

Join the Global Safety and Security team at DoorDash, where we prioritize the protection of our employees, assets, and brand integrity. Our mission is to proactively manage safety risks through innovative technology and a strong commitment to our people.About the PositionAs an Agent on the Critical Incident Response Team (CIRT), you will play a crucial role in monitoring, triaging, and responding to incidents affecting DoorDash’s global operations. Your responsibilities will include real-time analysis of alerts, coordinating appropriate responses, and escalating issues as per the Global Safety & Security protocols.Your position is pivotal in our emergency response framework, ensuring swift and coordinated actions during critical situations such as natural disasters or workplace emergencies. Collaborating with regional and global partners, you will contribute to the safety of our workforce and the seamless operation of our services.What You'll DoSecurity Operations & MonitoringMonitor alerts from global intelligence, safety, and security systems to identify potential threats.Conduct routine patrols to assess behavioral concerns.Perform regular checks of doors, cameras, and access points.Access Control & Visitor ManagementOversee employee and guest badging processes, including badge printing and access level assignments.Incident Response & SafetyTriage incidents based on severity and escalate according to CIRT protocols.Act as the primary contact for incident reporting and management.

About Our TeamAt OpenAI, we believe that the development of artificial general intelligence must be conducted in a way that is safe and beneficial for all of humanity. Security is paramount to our mission and underpins every aspect of our work.Our Security team is dedicated to safeguarding OpenAI’s technology, personnel, and products. We adopt a highly technical approach to our creations while maintaining operational excellence in execution. Our core tenets include prioritizing impactful initiatives, empowering our researchers, anticipating future technological advancements, and fostering a robust security culture.About the PositionAs a Security Engineer specializing in insider threat detection and response, you will collaborate with our talented engineers and researchers to build and secure groundbreaking AI technologies. This role emphasizes the identification and mitigation of insider threats, ensuring the protection of OpenAI's most sensitive assets. Key responsibilities will include:Key Responsibilities:Innovate and enhance our detection and response infrastructure to automate comprehensive workflows for detection and investigation.Develop, assess, and refine detection rules to guarantee effective and sustainable operations.Lead projects across OpenAI’s technology landscape focusing on insider threats, including access abuse and intellectual property theft, as well as emerging risks associated with AI infrastructure.Collaborate with cross-functional teams such as HR, Legal, and investigative units, providing technical insights and evidence to support thorough investigations.Engage in pioneering AI research initiatives, leveraging AI to bolster OpenAI’s security framework.Ideal Candidate Profile:A minimum of 5 years of experience in a detection/response or insider risk role; we welcome both mid-level and senior applicants.Proficient in operating systems and platforms, including macOS, Windows, Linux, and Kubernetes, with hands-on experience in cloud infrastructure.Strong knowledge of modern adversarial tactics, data exfiltration methods, and experience in managing and leading incident responses.Demonstrated proficiency in scripting languages such as Python, Bash, or PowerShell.Possess excellent analytical and problem-solving skills, with a keen attention to detail.

As an Incident Manager in the Detection & Response team, you will play a pivotal role in safeguarding our systems and data. You will be responsible for leading incident response efforts, coordinating with various teams to ensure rapid resolution of incidents, and enhancing our incident management processes. This position requires a keen understanding of security vulnerabilities and incident management best practices.

Join Scale AI as a talented Infrastructure Security Engineer, where you'll play a pivotal role in safeguarding the integrity and security of our platform. This position focuses on securing expansive cloud environments, managing and fortifying various compute clusters, and reviewing infrastructure as code. Your proficiency in cloud security, infrastructure automation, and advanced security practices will be crucial in upholding and advancing our security framework.Your responsibilities include:Securing infrastructure across major cloud hosting platforms (e.g., AWS, Azure, GCP).Implementing and maintaining comprehensive security configurations and policies for cloud environments.Conducting regular security assessments and audits to identify vulnerabilities and propose enhancements.Developing and enforcing security best practices for infrastructure automation and orchestration.Collaborating with Developer Experience, IT, and product teams to integrate security into every phase of the infrastructure lifecycle.Reviewing and securing infrastructure as code (e.g., Terraform, CloudFormation).Mentoring team members on infrastructure security best practices and emerging threats.

About Us:At Parafin, we are dedicated to empowering small businesses, which are the foundation of our economy. Traditional banking solutions often fall short in supporting these enterprises, and that's where we come in. We create technology that simplifies access to essential financial tools for small businesses through their existing sales platforms.We collaborate with notable partners such as DoorDash, Amazon, Worldpay, and Mindbody to provide fast, flexible funding options, spend management solutions, and savings tools to small business users via seamless integration. Parafin handles the complexities of capital markets, underwriting, servicing, compliance, and customer support for our partners.Our team consists of innovators from leading companies like Stripe, Square, Plaid, Coinbase, and Robinhood, all driven by a shared passion for developing tools that foster the success of small businesses. With backing from prominent venture capital firms including GIC, Notable Capital, Redpoint Ventures, Ribbit Capital, and Thrive Capital, Parafin is a Series C company that has raised over $194M in equity and $340M in debt facilities.Join us in creating a future where every small business has the financial resources they need.About the PositionWe are seeking an experienced security-focused engineer to enhance and scale Parafin's security measures across our cloud and platform environments. Our Security and Infrastructure team is responsible for the foundational systems that power all of Parafin—from compute and networking to identity management and compliance. You will play a crucial role in ensuring these systems are secure, reliable, and compliant.In this role, you will design and implement controls, tools, and processes that maintain the resilience and compliance of our infrastructure, all while enabling developers to operate swiftly and safely. You will collaborate closely with various engineering and compliance teams to bolster our approach to access management, application security, threat monitoring, and incident response.

About Cogent SecurityCogent Security is pioneering the future of cybersecurity through Applied AI, creating advanced AI agents designed to combat rapidly evolving cyber threats. Our AI Taskforce analyzes vast datasets to neutralize potential breaches before they impact our clients.Our commitment to innovation combines cutting-edge research with practical application, ensuring our solutions are at the forefront of technology. In addition to our product development, Cogent Research acts as our applied AI laboratory, supplying the expertise required to create highly effective security workflows.Since our launch from stealth mode, Cogent has seen remarkable growth, collaborating with Fortune 500 companies to secure some of the most intricate production environments globally.Backed by Greylock, our team consists of exceptional talents from leading universities such as Stanford, Berkeley, and Carnegie Mellon, as well as high-growth companies like Scale AI and Tesla, and cybersecurity experts from stalwarts like Wiz and DeepMind.

About Cogent SecurityCogent Security is at the forefront of cybersecurity innovation, leveraging Applied AI to develop next-generation AI agents. In an era where cyber attacks evolve rapidly, our AI Taskforce analyzes vast amounts of enterprise data to proactively address vulnerabilities and prevent critical breaches.We combine pioneering research with practical execution, ensuring that our innovative solutions meet real-world challenges. Our Cogent Research division acts as our dedicated AI lab, driving the development of advanced security workflows.Since our emergence from stealth mode, we have rapidly grown, collaborating with Fortune 500 companies to secure complex production environments globally.Supported by Greylock, we have gathered a team of top talent from renowned institutions and leading organizations in the AI and cybersecurity sectors.About the RoleAs an Agent Engineer at Cogent Security, you will be pivotal in designing, building, and deploying critical AI agents tailored for complex client environments. Your role is highly cross-functional, involving direct collaboration with customers to understand their unique needs, adapting our platform accordingly, and iterating on scalable solutions to handle millions of real-world security events.You will manage projects from inception to deployment, including data onboarding and integrating feedback into our core agent platform. Your contributions will shape how AI agents detect threats, triage incidents, and automate security workflows for some of the most sophisticated organizations worldwide.This position is ideal for engineers who excel in dynamic environments, enjoy tackling complex technical challenges, and wish to see the tangible impact of their work.

About Cogent SecurityCogent Security is an innovative Applied AI Lab pioneering the future of AI agents in the realm of cybersecurity. In a world where cyber threats evolve at unprecedented speeds, our 'AI Taskforce' analyzes vast amounts of enterprise data to proactively address vulnerabilities and avert critical breaches.We remain at the forefront of technology by merging cutting-edge research with practical applications. Our dedicated Cogent Research team fuels our mission, ensuring we develop truly effective security workflows powered by AI.Since our inception, Cogent has rapidly grown, collaborating with Fortune 500 companies to safeguard the most intricate production environments globally.Supported by Greylock, our team comprises some of the brightest minds in applied AI, including experts from:Renowned universities such as Stanford, Berkeley, Penn, Duke, Carnegie Mellon, and Waterloo.High-growth unicorn companies like Scale AI, Databricks, Stripe, Tesla, and Coinbase.Leading cybersecurity specialists from Wiz, Abnormal AI, and Zscaler.Prestigious research institutions including DeepMind and SAIL.About the RoleAs we embark on building a suite of backend services and integrations with our design partners, we seek passionate and skilled Backend Engineers at both Senior and Staff levels, eager to thrive in the Applied AI domain.ResponsibilitiesDesign and implement critical backend subsystems and integration platformsComprehend business objectives and customer requirements to engineer backend subsystems that align with our technology strategies.Adapt systems to meet evolving needs of design partners and clients.Incorporate non-functional requirements such as compliance and security into system design.Establish scalable infrastructure foundationsPrepare for future growth in customer base, headcount, and data management by collaborating with your team to enhance infrastructure.

About DepthFirst AIAt DepthFirst AI, we recognize that software underpins modern civilization, yet its vulnerabilities pose significant risks to integrity and security. Our mission is to enhance software security through innovative solutions.We are developing cutting-edge intelligence to identify and remediate critical software vulnerabilities, leveraging AI agents to discover zero-day vulnerabilities across extensive customer codebases and popular open-source software.Our founding team comprises industry leaders from DeepMind, Databricks, Square, and Faire, bringing unparalleled expertise in security and large language models (LLMs). We seek talented technical professionals eager to explore the intersection of AI, security, and infrastructure.Role Overview:We are looking for a skilled Research Engineer to contribute to the development and training of AI agents focused on vulnerability discovery and exploitation.Your work will be pivotal in creating technology capable of detecting vulnerabilities, akin to Log4J, at scale, ensuring the security of customer and open-source codebases.Ideal candidates will possess a strong engineering intuition, experience in model evaluation and benchmarks, with reinforcement learning experience being an added advantage. Your contributions will be instrumental in shaping a product that aims to revolutionize security practices for companies.Why You Will Love This Role:Develop Cutting-Edge AI pipelines tailored for the detection and exploitation of complex software vulnerabilities.Design and Maintain evaluation benchmarks that genuinely reflect the challenges faced by our users.Craft effective training methodologies and reinforcement learning environments for security coding agents.Be Part of a Solution to critical security challenges, with feedback from our valued customers revealing the immediate impact of our product.

Join Decagon as a Security Engineer where you will play a crucial role in safeguarding our systems and data. You will collaborate with cross-functional teams to identify vulnerabilities, implement security measures, and ensure compliance with industry standards. This is an exciting opportunity to work in a dynamic environment and contribute to the security posture of our organization.

Juicebox is looking for a Security Engineer based in San Francisco. The main focus is to safeguard digital infrastructure and maintain the security of systems and data. Key responsibilities Develop and apply security measures throughout company systems Support compliance efforts with relevant industry security standards Location This role is based in San Francisco.