← All roles

Security Engineer - Detection & Response

LangChain· Engineering
Apply on company site
San Francisco, CA, New York, NY$185k - $250kFull-timePosted 8mo ago

About the role

Hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and services that host and execute agentic workloads. Partner with Product Security to turn threat models, vulnerabilities, and incidents into telemetry, detections, and durable defenses. Focuses on engineering systems that scale security operations and reduce risk.

Responsibilities

  • Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code. Validate coverage, measure signal quality, tune false positives, and continuously test whether defenses work.
  • Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane. Instrument services, define the signals that matter, and make security data reliable and useful.
  • Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment. Turn investigation findings into new detections and lasting improvements.
  • Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine security work. Design human-in-the-loop controls and evaluations so automation is safe, observable, and trustworthy.
  • Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes.
  • Partner with Product Security: Turn product threat models and vulnerability findings into production monitoring, and feed real-world detection and incident learnings back into secure design.

Qualifications

  • 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response — and the software skills to build your way out of repetitive work.
  • Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts.
  • Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable detections.
  • Detection and adversary expertise: The ability to model realistic attacker behavior, hunt across complex systems, test detection coverage, and distinguish meaningful signal from noise.
  • Hands-on incident response: You've participated in on-call, led incidents, and written postmortems that changed how a team operates.
  • Experience building reliable automation or developer-facing systems: You can design APIs and workflows, instrument what you build, evaluate quality, and operate it in production.
  • A pragmatic product mindset: You can identify users and requirements, prioritize the highest-leverage problems, define success, and ship iteratively.

Skills

Required:Security engineeringPythonKubernetesCloud platformsThreat modelingIncident response
Nice to have:Go

Benefits

  • medical, dental, and vision coverage
  • flexible vacation
  • a 401(k) plan
  • meals on in-office days in the US and more.
Last updated Oct 14, 2026. Interested? Apply on the company site.

About LangChain

Engineer reliable agents

LangChain provides the engineering platform and open source frameworks developers use to build, test, and deploy reliable AI agents.

AI agentsagent engineeringbrex-fastest-growing-2025liquid-ai-recruiting-targetopen source frameworksplatform
Company profileWebsite

More open roles at LangChain