← All roles

Detection and Response Engineer

Modal· Engineering
Apply on company site
New York$150k - $270kFull-timePosted 2mo ago

About the role

Engineering role focused on automation to detect, investigate, and respond to threats across Modal's platform; emphasizes building detections, investigation tooling, and response capabilities at scale, with collaboration across infrastructure, platform, and security teams.

Responsibilities

  • Design and build high-fidelity detections for attacks, abuse, and anomalous behavior across our infrastructure and production systems
  • Continuously improve detections based on telemetry, threat intelligence, and lessons learned from incidents
  • Improve visibility across cloud infrastructure, containers, identity systems, and production services
  • Lead or participate in investigations spanning production infrastructure, cloud environments, and internal systems
  • Build playbooks and automation that reduce investigation time and improve response consistency
  • Drive post-incident improvements that eliminate entire classes of future incidents
  • Build internal tooling that improves detection, investigation, and response workflows
  • Leverage LLMs to automate repetitive analysis, accelerate investigations, and surface actionable insights from security telemetry
  • Improve the collection, quality, and usability of security telemetry across the platform
  • Partner with engineering teams to ensure new systems are observable and secure by default
  • Help teams instrument services with the telemetry needed for effective detection and response
  • Drive security improvements that make the platform easier to defend over time

Qualifications

  • Experience in detection engineering, incident response, security engineering, or software engineering with a strong security focus
  • Strong software engineering skills with experience building production systems
  • Experience investigating security incidents in cloud-native or distributed environments
  • Familiarity with modern cloud infrastructure, Kubernetes, Linux, and networking
  • Experience building detections using logs, telemetry, behavioral signals, or large-scale event data
  • Strong SQL skills for investigating security events and developing detections
  • Interest in applying AI and LLMs to detection, investigation, and response, including understanding emerging threats involving AI-powered systems
  • Strong written and verbal communication skills

Skills

Required:Detection engineeringIncident responseSecurity tooling & automationCloud security / KubernetesSQL for security investigations
Nice to have:AI / LLM applications in security
Last updated Oct 21, 2026. Interested? Apply on the company site.
Modal logo

About Modal

High-performance AI infrastructure

Bring your own code, and run CPU, GPU, and data-intensive compute at scale. The serverless platform for AI and data teams.

AI infrastructureBatchGPU scalingInferenceML workloadNotebooksObservabilityPlatform
Company profileWebsite

More open roles at Modal