Source Job

North America

  • Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
  • Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
  • Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.

Python JavaScript AWS Terraform Incident Response

20 jobs similar to Staff Security Engineer, AI-Driven Detection & Response

Jobs ranked by similarity.

$225,400–$281,800/yr
US Unlimited PTO

  • Lead detection and response strategy for Apollo's Security team, building detection systems and response automations hands-on.
  • Own detection architecture, security observability, and incident response readiness across cloud and SaaS environments.
  • Drive AI-augmented detection and response, measuring gains in speed, coverage, and signal quality.

Apollo.io is a leading go-to-market platform for revenue teams, providing verified contact data and engagement tools for over 500,000 companies. Founded in 2015, it has raised ~$250M, is valued at $1.6B, and fosters an AI-native culture of continuous improvement.

$170,000–$190,000/yr
US Unlimited PTO

  • Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
  • Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
  • Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.

Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.

$0–$185,800/yr
Global 26w maternity 26w paternity

  • Design and build security solutions across application security, infrastructure, and AI agentic systems.
  • Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
  • Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

$157,675–$238,500/yr
US

  • Build, deploy, and continuously improve MITRE ATT&CK–aligned detections across cloud, endpoint, identity, email, and application telemetry with clear false-positive thresholds.
  • Own the full detection lifecycle from hypothesis and data validation through deployment, tuning, and retirement.
  • Advance the detection-as-code platform with version control, peer review, automated testing, CI/CD, and improved pipeline reliability and observability.

Samsara is the pioneer of the Connected Operations™ Cloud, helping organizations that depend on physical operations to harness IoT data for actionable insights. They are a recently public company with a high-caliber team, embracing a flexible working model that supports remote and hybrid work.

$140,000–$160,000/yr
US

  • Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
  • Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
  • Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.

Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.

$151,000–$178,500/yr
US

  • Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
  • Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
  • Own SOC 2, HIPAA, AI security governance, and incident response.

AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.

$140,000–$200,000/yr
United States

  • Lead and grow the SOC, owning detection strategy and incident response across both production and corporate estates.
  • Architect an AI-first operating model for the SOC, building automation for triage, enrichment, and investigation.
  • Partner with Platform Engineering to extend detection into production and cloud workloads, treating detection content as code.

Motive empowers the people who run physical operations with tools to make their work safer, more productive, and more profitable. The company serves nearly 100,000 customers across a wide range of industries, including transportation, logistics, construction, energy, and more.

US

  • Design, build, and operate secure, cost-efficient infrastructure in a multi-cloud environment (AWS and Azure).
  • Develop and evolve infrastructure as code for repeatable, auditable, and scalable system provisioning.
  • Partner with product and application engineering teams and participate in an on-call rotation.

Abnormal AI is an AI-native behavioral security platform protecting enterprises from advanced threats by analyzing communication and access behavior. It protects over 25% of the Fortune 500 and fosters a fast-paced, remote-first culture.

$120,000–$150,000/yr
US

  • Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
  • Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
  • Lead incident response, harden AWS estate, and automate security workflows with code.

Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.

US

  • Own end-to-end deployment of Tines' platform within complex enterprise environments.
  • Drive adoption across the organisation by training and supporting stakeholders at all levels.
  • Identify and develop new use cases to expand value of the platform.

Tines is the intelligent workflow company that powers some of the world's most important workflows. They are driven by values of Simplicity, Speed, and Soundness and foster a culture of curiosity, growth, and integrity.

Global

  • Secure BJAK's AI-enabled products and agent workflows using third-party models.
  • Assess customer data shared with model vendors and design least-privilege controls for AI agents.
  • Threat model prompt injection and support SC TRM/BNM RMiT compliance for AI risks.

BJAK is a mobile-first insurance platform that makes insurance accessible online and is the leading insurtech in Southeast Asia. With over 20 nationalities working from offices and remotely worldwide, the company values passionate builders who love creating next-generation financial products.

  • Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
  • Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
  • Partner with DevOps on paved roads for secure-by-default development and lead incident response.

Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.

$235,000–$305,000/yr
US 4w PTO 12w maternity 12w paternity

  • Lead threat modeling and security architecture for AI-enabled systems, including LLM applications and cloud-native platforms.
  • Define and implement secure engineering patterns and guardrails across AWS infrastructure, CI/CD pipelines, and third-party integrations.
  • Partner with engineering and security teams to embed security throughout the AI product lifecycle and drive cross-functional security initiatives.

Quanata is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions for State Farm and HiRoad. We are a wholly owned subsidiary of State Farm with a remote-first culture that values inclusion and positive team dynamics.

Europe US 6w PTO

  • Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
  • Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
  • Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.

n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.

Brazil Unlimited PTO

  • Lead security incident response end-to-end across cloud, identity, and workload logs.
  • Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
  • Automate detection and response tasks using Python and Terraform, and mentor engineers.

Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.

$232,000–$379,000/yr
US 4w PTO 12w maternity 12w paternity

  • Partner with product portfolios to manage product security, emphasizing AI/ML security and cross-functional collaboration.
  • Lead security design reviews, threat modeling, and secure code reviews across web, backend, and API stacks.
  • Integrate AppSec tooling into CI/CD, support secure development practices, and participate in incident response.

Quanata is an insurance technology company building advanced risk prediction and prevention solutions and a full-stack, AI-native insurance platform for State Farm and HiRoad. It is wholly owned by State Farm and fosters an inclusive, positive culture focused on hiring talented people across disciplines.

UK Unlimited PTO

  • Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
  • Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
  • Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.

G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.

US

  • Implement and improve preventive security controls across enterprise systems, translating security requirements into operational protections.
  • Build and maintain security automation using Python, Go, APIs, and Terraform to enforce controls and reduce manual work.
  • Partner with security, IT, and platform teams to validate controls, troubleshoot complex implementations, and drive security improvements.

Databricks is the data and AI company, providing a unified platform to build and scale data and AI applications, analytics, and agents. With 20,000+ organizations worldwide and offices in 30+ locations, it fosters a diverse and inclusive culture.

US 18w maternity 16w paternity

  • Contribute to secure-by-design practices and maturing SAST, SCA, and DAST programs.
  • Develop Secure AI Development Lifecycle and AI-assisted threat modeling framework.
  • Mentor engineers on secure coding and foster cross-functional collaboration.

Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.

US

  • Own security solutioning for k0rdent AI across the full stack, from hardware to AI models.
  • Publish reference architectures and proofs of concept with customers and partners.
  • Research emerging threats and present to engineers, executives, and conference audiences.

Mirantis, an IREN company, is the Kubernetes-native AI infrastructure company enabling organizations to build scalable, secure infrastructure for AI and data-intensive applications. It is a distributed, world-class team committed to openness and technical excellence.