Security Engineer, Detection and Response
- Location
- San Francisco, CA
- Listed
- 23 days ago
About the Role
We’re hiring for a Staff Detection & Response Engineer to build fal's detection and response (D&R) program. You’ll own how we find, investigate, and contain threats across our organization and ecosystem. You’ll set the strategy, select the tooling, build the system, and lead incidents end to end, with room to grow the team as the program matures. Proficiency in building with and using AI is central to this role.
What You’ll Do
Build Detection
- Stand up logging and telemetry pipelines across cloud, Kubernetes, bare-metal GPU hosts, threat intel platforms and identity/SaaS providers
- Write, test, and tune detections as code, keeping signal high and noise low
- Lead and run threat hunting to turn findings into lasting detections
- Build AI-driven detection and response, using LLMs and agents for triage, enrichment, investigation, and alert correlation
Own Incident Response
- Lead incidents from triage and containment through forensics, communication, and post-incident review
- Write the IR plan and playbooks, establish severity models, and set on-call rotations
- Design and lead tabletop exercises with engineering and leadership
Shape the Program
- Own the D&R roadmap and build-vs-buy decisions
- Define and report on coverage, MTTD, and MTTR
- Partner with infra, platform, and ML teams to fix the gaps exposed by incidents
- Own detection and incident response controls and evidence for SOC 2, ISO 27001
What We’re Looking For
- AI fluency: you use LLMs, agents, and AI coding tools daily to build detections, automate investigations, and ship tooling
- 5+ years in security engineering, with deep hands-on detection engineering and incident response experience
- Experience leading incidents in cloud-native environments (AWS/GCP, Kubernetes, Linux)
- Sound judgment during incidents, with actions proportional to real business impact
- Hands-on with SIEM, EDR, and cloud security tooling
- Has built or scaled a D&R or IR program, ideally as an early hire or founding team member
- Communicates clearly under pressure to different audiences, from engineers to executives
Nice to Have
- Specialization in GPU infrastructure, ML platforms, or multi-tenant compute
- Background or experience in forensics, malware analysis, or threat intelligence
- Hands-on experience with detections-as-code or SOAR automation
- Experience supporting SOC 2 or ISO 27001 audits
Compensation & Benefits
- Competitive salary + equity
- Full health, dental, and vision coverage
- Opportunity to work on frontier AI infrastructure
What We Offer at fal
- Interesting and challenging work
- A lot of learning and growth opportunities
- We offer visa sponsorship and will help you relocate to San Francisco.
- Health, dental, and vision insurance (US)
- Regular team events and offsites
Compensation
- $180,000 - $250,000 + equity + comprehensive benefits package
About fal
fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products.
As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on.
Equal opportunity and legal notices
fal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.
From fal's careers page, first listed on Rolev.ai on October 17, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Security Engineer, Detection and Response role at fal, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Similar roles
- Security Engineering Accreditation Lead, DefenseApplied Intuition · D.C., WA
- Security Engineering ManagerViavisolutions · Chandler-HQ, AZ
- Security EngineerAegis Ai · Remote (US)
- Security EngineerInfojini Inc. · Las Vegas, NV
- Security Engineer - Network Edge SecurityBlock · Bay Area, CA
- Security EngineerMixpanel · San Francisco, CA
Common questions
Where is the Security Engineer, Detection and Response job at fal located?
This Security Engineer, Detection and Response position at fal is located in San Francisco, CA. Always check fal's application page for specific state eligibility or relocation policies.
How do I apply for the Security Engineer, Detection and Response position at fal?
This listing links directly to fal's Ashby application page. You can apply directly on fal's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Ashby application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.