Security Engineer, Detection and Response
San Francisco · 10+ years experience · Full-time · Onsite · Posted Sep 29, 2026
At a glance
- Experience
- 10+ years experience
- Employment
- Full-time
- Workplace
- Onsite
- Location
- San Francisco
About the role
- The Detection and Response Lead will build and scale the foundations of Serval's cybersecurity detection and response operations.
- This role involves setting strategy and driving execution for security monitoring, incident response, recovery, and post-incident improvement.
- The position requires a hands-on leader to build and mentor a team while partnering with Engineering and Product to embed security by design.
Responsibilities
- Design, implement, and operate detection and response operations including monitoring, triage, investigation, containment, and remediation.
- Build, lead, and mentor a team spanning observability, detection and response, and threat intelligence.
- Ensure operational rigor through incident playbooks, on-call paths, and tabletop exercises.
- Improve detection quality and coverage by partnering with engineering to ensure reliable telemetry.
- Embed detection and response capabilities into Serval's systems by design.
- Build a security program capable of withstanding sophisticated adversaries.
- Utilize Serval's own agents to solve frontier security and security-operations problems.
Requirements
- 10+ years in cybersecurity with expertise in detection engineering, incident response, and security operations.
- Deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams.
- Stellar leadership skills with a history of driving continuous improvements to programs, processes, and people.
- Exceptional written and verbal communication skills.
- Ability to remain calm under pressure and run command of security incidents.
- Deep expertise in modern observability stacks including SIEM, data lakes, EDR, cloud telemetry, and logging.
- Understanding of modern adversary tradecraft (TTPs) and experience translating them into detection strategies.
- Mission-oriented with unimpeachable integrity.
Benefits
- Impact: Be a key player in shaping the success of our product and company.
- Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors.
- Culture: Join a culture that values innovation, ownership, accountability, and fun.
Skills
- SIEM
- Data Lakes
- EDR
- Cloud Telemetry
- Logging
- Detection Engineering
- Incident Response
- Threat Intelligence
- Observability
