← All roles

Security Engineer, Detection and Response

Serval· Engineering
Apply on company site
San Francisco$200k - $325kFull-timePosted 3w ago

About the role

Detection and Response Lead responsible for building and scaling Serval's cybersecurity detection and response operations, setting strategy and driving execution across monitoring, incident response, recovery, and post-incident improvement.

Responsibilities

  • Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure.
  • Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow.
  • Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed.
  • Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments.
  • Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought.
  • Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems.

Qualifications

  • Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations.
  • Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams.
  • Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people.
  • Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority.
  • Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives.
  • Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions.
  • Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment.

Skills

Required:Cybersecurity leadershipDetection engineeringIncident responseObservability stack

Benefits

  • Meaningful early-stage equity
  • Comprehensive health coverage
  • Flexible PTO
  • Daily lunches and snacks
  • Onsite gym access
  • Regular team events and offsites
Last updated Sep 30, 2026. Interested? Apply on the company site.

About Serval

AI Agents for IT

Serval is the AI-native ITSM for modern teams. Use natural language to automate routine tasks and resolve help desk requests.

AI guidanceIT operationsITSMai-agents-and-applicationsautomationhelpdeskknowledge basesecurity
Company profileWebsite

More open roles at Serval