Detection and Response Engineer
- Location
- San Francisco, CA · On-site
- Job type
- Full-time
- Level
- Senior
- Listed
- 16 days ago
Skills & highlights for this role
- Python
- TypeScript
- Go
- AWS (IAM, VPC, KMS, GuardDuty, CloudTrail)
- Kubernetes detection (audit logs, runtime telemetry, workload identity)
- Endpoint security (macOS)
- Detection and response techniques
- Incident response experience
- On-call experience
- Written and verbal communication
- AI/LLM security point of view
Also useful
- Azure or GCP fluency
- LLM red-teaming
- Agent sandbox research
- AI-relevant security threat defense
About the Role
We’re looking for a Detection and Response engineer to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, lead incident response, and stay ahead of the curve incorporating real-time threat intelligence. Have a big impact with a small team that has outsized capabilities.
What You'll Do
- Build security telemetry pipelines across cloud execution environments (ECS/K8s), CI/CD systems, identity systems, endpoints, and agentic workloads
- Continuously improve detections for attacks, abuse, and anomalous behavior
- Own the alert pipeline end-to-end and keep signal-to-noise high
- Lead incident response and participate in on-call: triage, scope, contain, and remediate incidents, then write postmortems that produce durable improvements
- Hunt proactively for threats and build the tooling for turning evidence into new detections
- Build agents that triage alerts, enrich findings, gather evidence, and scope incidents, with human-in-the-loop controls and evals that keep the automation trustworthy
- Run vulnerability response, evaluating impact and driving remediation across our infrastructure
Ideal Candidate Credentials
- Proficient in modern backend technologies and comfortable writing real code in Python, TypeScript, or Go
- AWS experience (IAM, VPC, KMS, GuardDuty, CloudTrail) and working fluency in at least one of Azure or GCP
- Kubernetes detection experience: audit logs, runtime telemetry, and workload identity
- Knowledge of endpoint security (MacOS) and detection and response techniques
- Hands-on incident experience: you’ve been on call, led incidents, and written postmortems
- Strong written and verbal communication
- A clear point of view on AI/LLM security and hands-on experience defending relevant threats
- Bonus: prior experience with LLM red-teaming, agent sandbox research, or other AI-relevant security threat defense
Benefits Include
- Medical, dental, and vision insurance
- Daily lunch, snacks, and beverages
- Flexible time off
- Competitive salary and equity
- Wifi & cellphone stipend
About the Company
Braintrust is the agent observability platform. By actively applying intelligence to agent traces and automatically surfacing the most critical patterns, Braintrust gives teams the visibility to understand how agents behave in production and the tools to improve them.
Teams at Notion, Stripe, Box, OpenAI, and Cloudflare use Braintrust to trace their agents, find the issues in their observability data, and run evals that tell them how to improve.
Equal opportunity and legal notices
Braintrust is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
From Braintrust's careers page, first listed on Rolev.ai on October 25, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Detection and Response Engineer role at Braintrust, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Common questions
Where is the Detection and Response Engineer job at Braintrust located?
This Detection and Response Engineer position at Braintrust is located in San Francisco, CA (On-site). Always check Braintrust's application page for specific state eligibility or relocation policies.
What qualifications are required for Detection and Response Engineer at Braintrust?
For the Detection and Response Engineer role, Braintrust highlights experience with Python, TypeScript, Go, AWS (IAM, VPC, KMS, GuardDuty, CloudTrail), Kubernetes detection (audit logs, runtime telemetry, workload identity), Endpoint security (macOS). Rolev.ai can score your existing resume against these requirements and show any skill gaps before you apply.
How do I apply for the Detection and Response Engineer position at Braintrust?
This listing links directly to Braintrust's Ashby application page. You can apply directly on Braintrust's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Ashby application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.