Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Engineer, Detection & Response role.
Rezi rewrites your resume against Thinking Machines Lab's job description. Free.

Tailor your resume to this Security Engineer, Detection & Response role.
Rezi rewrites your resume against Thinking Machines Lab's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Engineer, Detection & Response posting at Thinking Machines Lab — free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the Security Engineer, Detection & Response posting at Thinking Machines Lab — free, in seconds.
About the Role
We are looking for a detection and response engineer to build our capabilities for finding, investigating, and stopping threats against our company, platforms, models, and data. You will own the pipelines that turn raw telemetry into high-fidelity detections, lead response during incidents, and manage a threat intelligence practice to focus defenses on relevant adversaries. You will partner with security, infrastructure, research, and product teams to ensure detection and response scale with the company.
Responsibilities
- Lead incident response end-to-end, including triage, scoping, containment, eradication, recovery, and blameless postmortems.
- Design, build, and operate security data pipelines and tooling for collecting, normalizing, enriching, and storing telemetry.
- Author, deploy, and maintain high-fidelity detections across SIEM, endpoint, cloud, and security tooling.
- Build and run a threat intelligence practice, tracking actors and campaigns relevant to AI labs.
- Proactively hunt for threats and build automation and response tooling.
- Collaborate with researchers and product teams to detect AI-specific threats in production.
- Develop and exercise incident response plans, on-call processes, and tabletop exercises.
- Participate in an on-call pager rotation for security incidents.
Requirements
- Bachelor’s degree or equivalent experience in computer science, engineering, or similar.
- Proficiency in Python or Rust for building data pipelines, detections, and internal tools.
- A track record responding to real security incidents in production environments.
- Hands-on experience building and operating security data pipelines at scale.
- Experience producing and consuming threat intelligence.
- Strong understanding of cloud (AWS, GCP, or Azure), Kubernetes, and identity provider telemetry.
- Familiarity with host and network forensics.
- Comfort operating across the stack and owning projects end-to-end.
- Clear communication skills for technical and non-technical audiences.
Skills
- Python
- Rust
- SIEM
- Data pipelines
- Threat intelligence
- Cloud security
- Kubernetes
- Identity provider telemetry
- Host forensics
- Network forensics
- Prompt injection detection
- Model extraction detection
- Anomalous API usage detection
- ML infrastructure telemetry
- Stream processing
- Malware analysis
- Reverse engineering
Location
- San Francisco, California
Work Type
- Onsite
Experience Level
- Mid-level
- Senior
Education Level
- Bachelor's degree or equivalent experience
Salary/Compensations
- $300,000 - $350,000 USD
Benefits
- Health benefits
- Dental benefits
- Vision benefits
- Unlimited PTO
- Paid parental leave
- Relocation support
- Visa sponsorship
About the Company
- The mission of Thinking Machines is to build AI that extends human will and judgment.
- We are training frontier models with Inkling, developing Tinker to let people make models their own, and crafting interfaces that broaden human-AI communication.
- We believe the future worth building is human, and we're hiring people who want to build it.