← All roles

Detection and Response Engineer

Braintrust· Engineering
Apply on company site
San Francisco, New York City, SeattleFull-timePosted yesterday

About the role

We’re looking for a Detection and Response engineer to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack, practicing detection-as-code, leading incident response, and incorporating real-time threat intelligence.

Responsibilities

  • Build security telemetry pipelines across cloud execution environments (ECS/K8s), CI/CD systems, identity systems, endpoints, and agentic workloads
  • Continuously improve detections for attacks, abuse, and anomalous behavior
  • Own the alert pipeline end-to-end and keep signal-to-noise high
  • Lead incident response and participate in on-call: triage, scope, contain, and remediate incidents, then write postmortems that produce durable improvements
  • Hunt proactively for threats and build the tooling for turning evidence into new detections
  • Build agents that triage alerts, enrich findings, gather evidence, and scope incidents, with human-in-the-loop controls and evals that keep the automation trustworthy
  • Run vulnerability response, evaluating impact and driving remediation across our infrastructure

Qualifications

  • Proficient in modern backend technologies and comfortable writing real code in Python, TypeScript, or Go
  • AWS experience (IAM, VPC, KMS, GuardDuty, CloudTrail) and working fluency in at least one of Azure or GCP
  • Kubernetes detection experience: audit logs, runtime telemetry, and workload identity
  • Knowledge of endpoint security (MacOS) and detection and response techniques
  • Hands-on incident experience: you’ve been on call, led incidents, and written postmortems
  • Strong written and verbal communication
  • A clear point of view on AI/LLM security and hands-on experience defending relevant threats
  • Bonus: prior experience with LLM red-teaming, agent sandbox research, or other AI-relevant security threat defense

Skills

Required:Backend programmingCloud provider experienceKubernetes securityEndpoint securityIncident responseCommunication
Nice to have:AI/LLM security

Benefits

  • Medical, dental, and vision insurance
  • Daily lunch, snacks, and beverages
  • Flexible time off
  • Competitive salary and equity
  • Wifi & cellphone stipend
Last updated Oct 25, 2026. Interested? Apply on the company site.
Braintrust logo

About Braintrust

Ship quality AI at scale

Braintrust is the AI observability platform for tracing production, running evals, and catching regressions before they reach users.

AI debuggingAI development platformAI evaluationAI evaluation frameworkAI monitoringAI observabilityAI performance testingAI testing
Company profileWebsite

More open roles at Braintrust