Detection & Response Engineer

Stack

Responsibilities

• ▹Own detection and response end to end: what is logged, what is alerted on, how incidents are triaged and recovered
• ▹Write and tune detections as code across cloud environments, Kubernetes, identity systems, endpoints and SaaS
• ▹Lead incident response from first alert through containment and forensics, then write the post-incident review
• ▹Build automation for triage, including enrichment, correlation, containment actions and evidence collection, using LLM-based tooling where it holds up under audit
• ▹Monitor AI agents and developer tooling operating in the environment and turn that into telemetry and controls
• ▹Partner with platform and research engineers so new systems ship with logging and response playbooks
• ▹Run threat hunts and tabletop exercises and fix what is found
• ▹Turn incident and detection metrics into evidence for SOC 2, ISO 27001 and customer security reviews with the GRC team
• ▹Participate in an on-call rotation for security incidents

Requirements

• ▹Hands-on incident response experience: triaging live alerts, leading investigations and writing them up afterward
• ▹Experience building and tuning detections in a modern SIEM, ideally managed as code

Soft skills

What we offer

• ▹Open to remote hiring (offices in New York, San Francisco, Seattle, London, Paris, Tel Aviv)

About the company

Runway is building AI to simulate the world by merging art and science, believing world models are at the frontier of AI progress.