Detection And Response Jobs

The Anomaly Detection team’s mission is to build scalable, cost effective systems that can automatically detect anomalies in our customers’ system telemetry. The ultimate goal is to be able to intelligently find problems in system telemetry proactively without the need for our customers to set up or configure specific alarms or alerts. This is a chance to work on a team that sits at the intersection of distributed systems and machine learning and applying those techniques at massive scale to serve a real world customer need. At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them. What You’ll Do: Lead and develop an existing engineering team of 8; building trust, setting technical direction, and establishing a high bar for ownership and execution Own the roadmap and execution for our key signal finding systems Work closely with product management and applied scientists to build an effective detection system and the right evaluation mechanisms to ensure the quality of our signals Build and operate both traditional machine learning and LLM based systems in production at scale Drive the team's AI-native development practices, setting high standards for safety, validation, and increasing agent autonomy over time Who You Are: Experienced engineering manager with a track record of shipping robust and scalable distributed systems with AI and/or ML components. Distributed systems experience is a must-have Experience with Java, Python or Go, and experience working in a platform-focused team Strong cross-team collaboration and stakeholder management skills Comfortable making significant contributions to product strategy in an ambiguous environment rather than executing a pre-defined roadmap Direct experience building and training M

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Payments Risk Analyst II As a Payments Risk Analyst II on the Risk & Fraud team within the Consumer & Business group, you'll own the identification and mitigation of payments fraud across Coinbase's fiat payment rails, including ACH, wire, and card transactions. This team protects millions of customers and billions in transaction volume from chargebacks, unauthorized deposits, and account takeover schemes. You'll investigate escalated fraud cases, analyze risk patterns across multiple channels, and partner cross-functionally to strengthen detection systems across one of crypto's highest-volume retail platforms. What you'll do: Own end-to-end investigation and resolution of escalated payments fraud cases, including chargebacks, ACH returns, wire disputes, and account takeovers, across phone, messaging, and email channels. Analyze fraud trends and patterns across payment activities, synthesizing data into actionable recommendations that improve detection logic and reduce loss exposure. Handle premium and high-complexity customer cases, including CB1, HNWI, and executive escalations, using judgment to make risk decisions and coordinating with stakeholders to resolve issues. Partner cross-functionally with Product, Data Science, Risk ML, and Engineering to develop and iterate on risk management strategies, rule logic, and fraud prevention processes. Identify work

Datadog is seeking a motivated and experienced Security Sales Engineer to join our dynamic enterprise sales engineering team. In this role, you will play a critical part in driving our security sales efforts by providing technical expertise and delivering compelling solutions to our customers. You will work closely with our enterprise sales engineers and sales team to identify customer needs, craft go to market strategy, demonstrate the value of Datadog's security solutions, and ensure customer satisfaction. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What you will do: Support the Enterprise Security Sales team in driving adoption of Datadog’s security offering within target strategic accounts. Collaborate with the broader sales team to identify and understand security requirements across Datadog’s Enterprise customer base. Conduct detailed product demonstrations and presentations, showcasing the capabilities and benefits of Datadog's security solutions. Provide technical expertise and support throughout the sales cycle, including during customer evaluations and proof-of-value initiatives. Develop and maintain a deep understanding of Datadog's security products, industry trends and current vulnerabilities, staying updated with the latest features and enhancements. Assist in the creation of technical proposals, documentation, and other sales materials. Work closely with the product management and engineering teams to relay customer feedback and influence product development. Participate in industry events, conferences, and webinars to promote Datadog's security solutions.. Who You Are : Bachelor’s degree in Computer Science, Information Technology, or a related field. Deep experience with SIEM platforms and detection pipelines, SOC workflows (alert triage

Datadog is seeking a motivated and experienced Security Sales Engineer to join our dynamic enterprise sales engineering team. In this role, you will play a critical part in driving our security sales efforts by providing technical expertise and delivering compelling solutions to our customers. You will work closely with our enterprise sales engineers and sales team to identify customer needs, craft go to market strategy, demonstrate the value of Datadog's security solutions, and ensure customer satisfaction. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What you will do: Support the Enterprise Security Sales team in driving adoption of Datadog’s security offering within target strategic accounts. Collaborate with the broader sales team to identify and understand security requirements across Datadog’s Enterprise customer base. Conduct detailed product demonstrations and presentations, showcasing the capabilities and benefits of Datadog's security solutions. Provide technical expertise and support throughout the sales cycle, including during customer evaluations and proof-of-value initiatives. Develop and maintain a deep understanding of Datadog's security products, industry trends and current vulnerabilities, staying updated with the latest features and enhancements. Assist in the creation of technical proposals, documentation, and other sales materials. Work closely with the product management and engineering teams to relay customer feedback and influence product development. Participate in industry events, conferences, and webinars to promote Datadog's security solutions.. Who You Are : Bachelor’s degree in Computer Science, Information Technology, or a related field. Deep experience with SIEM platforms and detection pipelines, SOC workflows (alert triage

Datadog is seeking a motivated and experienced Security Sales Engineer to join our dynamic enterprise sales engineering team. In this role, you will play a critical part in driving our security sales efforts by providing technical expertise and delivering compelling solutions to our customers. You will work closely with our enterprise sales engineers and sales team to identify customer needs, craft go to market strategy, demonstrate the value of Datadog's security solutions, and ensure customer satisfaction. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What you will do: Support the Enterprise Security Sales team in driving adoption of Datadog’s security offering within target strategic accounts. Collaborate with the broader sales team to identify and understand security requirements across Datadog’s Enterprise customer base. Conduct detailed product demonstrations and presentations, showcasing the capabilities and benefits of Datadog's security solutions. Provide technical expertise and support throughout the sales cycle, including during customer evaluations and proof-of-value initiatives. Develop and maintain a deep understanding of Datadog's security products, industry trends and current vulnerabilities, staying updated with the latest features and enhancements. Assist in the creation of technical proposals, documentation, and other sales materials. Work closely with the product management and engineering teams to relay customer feedback and influence product development. Participate in industry events, conferences, and webinars to promote Datadog's security solutions.. Who You Are : Bachelor’s degree in Computer Science, Information Technology, or a related field. Deep experience with SIEM platforms and detection pipelines, SOC workflows (alert triage

The Behavior AI team builds the AI-based anomaly detection behind Datadog's security products. Our models learn what normal looks like across the billions of logs, events, and telemetry records flowing through the platform every second, and they flag the behavior that does not fit, on every record, in real time, at a cost that makes sense at our scale. What we build does not ship to a single feature. The same models power detection across many of Datadog's security products at once, so the work has impact well beyond any one team. Large general-purpose models are too slow and too expensive to run in that path, so we take the opposite approach: small, custom models, designed for high-throughput stream processing and optimized to run cheaply on every record. We are hiring a Senior Applied Scientist to build these models from start to finish. You will contribute to designing the architecture, training at scale, and the optimization work that takes a model from training to running efficiently on production traffic. This optimization requires a deep understanding of the constraints imposed by both the software and the hardware, together with the applied mathematics to work within them: often it comes down to finding a mathematical reformulation that fits those constraints better, and that judgment can decide whether a model reaches production at all. The work involves a number of open questions. How do you obtain most of the quality of a large model from one that is far smaller and cheap enough to run on the full stream? Where is it worth trading exactness for speed, and how do you reason about the error you accept? How do you make a small model's outputs clear enough that the detection engineers and analysts who rely on it can trust what it reports? If these are the problems you want to work on, we would like to hear from you. At Datadog, we place value in our office culture: the relationships and collaboration it builds, and the creativity it bring

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE As a Senior Security Operations Engineer – Attack Surface Management , you will help engineer, operate, and continuously improve our enterprise Attack Surface and Vulnerability Management capabilities. You will focus on discovering and understanding our attack surface, identifying vulnerabilities and exposures, prioritizing them based on real-world risk, and driving remediation across our global environment. The role spans Attack Surface Management, Vulnerability Management, Zero Trust, Secrets and Credential Security, SSPM, Deception, Detection Engineering and Security Automation. We are looking for engineers with strong ASM/Vulnerability Management fundamentals and deeper expertise in one or more adjacent security domains. WHAT YOU’LL DO Engineer and improve enterprise Attack Surface and Vulnerability Management across cloud, infrastructure, endpoints, applications, and internet-facing environments. Discover and correlate assets across security platforms and identify unknown, unmanaged, stale, and externally exposed assets. Drive risk-based vulnerability prioritization using asset criticality, exposure, exploitability, known exploitation, threat intelligence, and compensating controls. Establish remediation workflows and SLAs and partner with asset owners to drive measurable risk reduction. Operate and troubleshoot Zscaler ZIA/ZPA, including SSL inspection, access policies, connectivity, and Zero Trust controls.

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Product Research Location: Remote US Compensation Range: $215,000.00 to $225,000.00 base plus bonus and equity What You’ll Do: Lead product research initiatives that develop and evaluate macOS security product strategies and technologies Identify and prototype new telemetry from Apple's Endpoint Security API and other macOS subsystems to expand prevention, hardening, and detection capabilities Reproduce and analyze macOS attacks through hands-on execution of attacker techniques, malware detonation, and vulnerability exploitation Reverse engineer macOS malware and Apple's own security frameworks (XProtect, XProtect Remediator, Gatekeeper, TCC) to identify coverage gaps and inform product direction Prototype and test new tools and methodologies for offensive operations against macOS endpoints, including EDR evasion and bypass research Build p

Our vision is to transform how the world uses information to enrich life for all. Join an inclusive team passionate about one thing: using their expertise in the relentless pursuit of innovation for customers and partners. The solutions we build help make everything from virtual reality experiences to breakthroughs in neural networks possible. We do it all while committing to integrity, sustainability, and giving back to our communities. Because doing so can fuel the very innovation we are pursuing. Department ADTS ATI PI Project Title Faster Cell Metrics Drift Detection Using Advanced Data Analytics Project Description The intern will undertake a structured engineering project to develop data analytics and detection models for the early identification of cell metric drift using large-scale manufacturing test and measurement data. Under the guidance of experienced engineers, the intern will analyze relationships among inline, probe, cell metric, and quality data. The intern will gain exposure to industrial data analytics, statistical analysis, detection modelling, and visualization techniques used in semiconductor manufacturing. The project may also involve AI-Enabled workflows for data exploration, pattern identification, and analytical productivity. Project activities will focus on defined analytical assignments and measurable learning outcomes. Objective of the Project Develop an understanding of cell metrics and their relationship with semiconductor manufacturing and product-quality data. Analyze manufacturing data to identify early indicators of cell metric drift. Develop a detection methodology for monitoring selected cell metrics and potential quality excursions. Communicate a

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE As a Senior Security Operations Engineer – Attack Surface Management , you will help engineer, operate, and continuously improve our enterprise Attack Surface and Vulnerability Management capabilities. You will focus on discovering and understanding our attack surface, identifying vulnerabilities and exposures, prioritizing them based on real-world risk, and driving remediation across our global environment. The role spans Attack Surface Management, Vulnerability Management, Zero Trust, Secrets and Credential Security, SSPM, Deception, Detection Engineering and Security Automation. We are looking for engineers with strong ASM/Vulnerability Management fundamentals and deeper expertise in one or more adjacent security domains. WHAT YOU’LL DO Engineer and improve enterprise Attack Surface and Vulnerability Management across cloud, infrastructure, endpoints, applications, and internet-facing environments. Discover and correlate assets across security platforms and identify unknown, unmanaged, stale, and externally exposed assets. Drive risk-based vulnerability prioritization using asset criticality, exposure, exploitability, known exploitation, threat intelligence, and compensating controls. Establish remediation workflows and SLAs and partner with asset owners to drive measurable risk reduction. Operate and troubleshoot Zscaler ZIA/ZPA, including SSL inspection, access policies, connectivity, and Zero Trust controls.

Help financial institutions build the next generation of fraud prevention. Online fraud and phishing are no longer simply cybersecurity or customer-awareness issues. For banks and insurers, fraud prevention is increasingly becoming a business transformation challenge involving payments, technology, data, customer journeys, operations and governance. At Capco, we help financial institutions translate this changing fraud landscape into practical solutions. Our work spans fraud prevention and detection, payment controls, real-time decisioning, fraud intelligence, customer protection and operating models. We are looking for an experienced Business Analyst with a strong track record in Fraud, Financial Crime, Payments or related Risk domains within financial services. What will you do? As a Business Analyst, you will work at the intersection of business, risk, operations and technology. You will help banks and insurers turn complex fraud challenges and regulatory requirements into concrete processes, requirements and solutions. Analyse and redesign fraud prevention and detection processes Translate business and regulatory requirements into functional requirements, user stories and process designs Design and improve payment and customer journeys around fraud prevention and intervention Define requirements for real-time fraud monitoring and decisioning Work on fraud data, behavioural analytics, device intelligence and fraud signals Support the design of fraud operating models, including roles, processes and governance Contribute to initiatives around victim support, case management and customer communication Facilitate workshops with stakeholders across Fraud, Risk, Payments, Operations, IT, Compliance and Customer Experience Translate complex business challenges into clear recommendations and actionable solutions What are we looking for? You are a Business Analyst who already has hands-on experience in fraud or a closely related domain and who understands the reali

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. AI Security Engineer (Agentic SOC) Location: McLean, VA | On-site (5 days/week) ABOUT THE TEAM The Appian Information Security department continuously evaluates the global threat landscape to protect Appian operations and service offerings. Our mission is to build, monitor, and scale robust security tools and processes that shield critical corporate and customer assets from emerging threats, international security concerns, and vulnerabilities, ensuring our AI-Powered Process Automation platform remains resilient and secure. THE OPPORTUNITY At Appian, we believe our greatest innovations spring from in-person collaboration. Joining our team at our McLean headquarters means you will work alongside elite security architects in a high-velocity environment that prioritizes your professional growth. This role offers an unparalleled launchpad to transition academic knowledge into real-world impact, giving you direct ownership over intrusion detection capabilities and cloud-based defense strategies for our Enterprise-Grade Orchestration ecosystem. WHAT YOU'LL DO Build & Deploy Agents: Design, test, and deploy autonomous and semi-autonomous AI agents that integrate natively with our enterprise security stack (SIEM, EDR, XDR, and Threat Intel feeds). Code the Playbooks: Translate traditional, human-centric SOC playbooks and analyst workflows into deterministic and heuristic agentic pipelines (using DAGs and multi-agent routing). Optimize RAG Pipelines: Design, optimize, and maintain production-grade Retrieval-Augmented Generation (RAG) workflows to inject real-

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. Information Security Engineer I Location: McLean, VA | Work Model: On-site (5 days/week) About the Team The Appian Information Security department continuously evaluates the global threat landscape to protect Appian operations and service offerings. Our mission is to build, monitor, and scale robust security tools and processes that shield critical corporate and customer assets from emerging threats, international security concerns, and vulnerabilities, ensuring our AI-Powered Process Automation platform remains resilient and secure. The Opportunity At Appian, we believe our greatest innovations spring from in-person collaboration. Joining our team at our McLean headquarters means you will work alongside elite security architects in a high-velocity environment that prioritizes your professional growth. This role offers an unparalleled launchpad to transition academic knowledge into real-world impact, giving you direct ownership over intrusion detection capabilities and cloud-based defense strategies for our Enterprise-Grade Orchestration ecosystem. What You’ll Do Build and scale internal security systems to enable Appian InfoSec to quickly adapt, monitor, and defend against modern attacker techniques. Analyze and investigate complex security-related data pulled from a wide range of security products, logging devices, and endpoint monitors. Design and implement enhanced detection technologies across various Appian systems to proactively surface potential anomalies and vulnerabilities. Conduct comprehensive risk analysis on infrastructure assets and provide

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Abuse Research team is dedicated to proactively hunting for emerging abuse vectors and studying complex attacker behaviors. Rather than just reacting to alerts, the team maps complete abuse paths across Stripe products and external systems to validate novel findings and explain the underlying product conditions that enable fraud. By building continuous abuse tests with agentic testing and related systems, they translate their deep research into actionable threat advisories, strategic control recommendations, and regression scenarios that fortify Stripe’s defenses. What you’ll do You will lead the Abuse Research Group (ARG)—a team of threat intelligence analysts, fraud researchers, and detection engineers focused on proactively identifying and mitigating threats to Stripe and our merchants. You will set the research agenda, guiding work across threat actor tracking, hands-on fraud investigations, merchant ecosystem defense, and the detection pipelines that turn findings into production enforcement. You will scale the team through hiring, coaching, and talent development, while serving as a technical advisor on complex investigations. You will also own ARG's relationships with key partners—including Risk, Trust & Safety, Fraud Platform, and Security Engineering. Lead, develop, and retain a team of threat intelligence analysts, fraud researchers, and detection engineers who thrive at the intersection of adversarial research an

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role Elastic Observability is building a system that monitors production environments the way an expert SRE would: it learns what normal looks like across logs, metrics, and traces, generates its own detection queries, identifies when something meaningful changes, and launches autonomous investigations — without waiting for a human to notice first. The goal is to close the gap between the alert that fires and the answer that matters, at a scale no on-call rotation can match. You will work on the Kibana UI, where Autonomous investigations meet the engineers who rely on them, making agent reasoning legible enough that an SRE can trust it, challenge it, and act on it. You will also work on the context and detection pipelines that turn raw telemetry into structured signals, the analysis that separates noise from events worth investigating, and the multi-agent system that digs into root causes autonomously and drives remediation. What You Will Be Doing You will work across our AI SRE solution. Over time, that will include the following: User-facing surfaces: Build the Kibana interfaces where signals, investigations, and findings reach users: the views an SRE uses to follow an investigation, inspect the evidence behind a conclusion, and drive the remediation that follows. This is most of the work today, though investigations increasingly ne