The ad says“Demonstrated application of AI/LLM tooling to security workflows — and sound judgment about its limits”
The ad says“8+ years of security engineering experience with deep, hands-on detection & response expertise (SIEM, EDR, cloud and identity telemetry, SOAR)”
The ad says“8+ years of security engineering experience with deep, hands-on detection & response expertise (SIEM, EDR, cloud and identity telemetry, SOAR)”
The ad says“Strong software engineering skills with detection-as-code and infrastructure-as-code fluency”
The ad says“8+ years of security engineering experience with deep, hands-on detection & response expertise (SIEM, EDR, cloud and identity telemetry, SOAR)”
The ad says“Experience leading incident response end to end in production environments”
The ad says“Strong software engineering skills with detection-as-code and infrastructure-as-code fluency”
The ad says“8+ years of security engineering experience with deep, hands-on detection & response expertise (SIEM, EDR, cloud and identity telemetry, SOAR)”
The ad says“8+ years of security engineering experience with deep, hands-on detection & response expertise (SIEM, EDR, cloud and identity telemetry, SOAR)”
The ad says“Strong software engineering skills with detection-as-code and infrastructure-as-code fluency”
Values
The ad says“Red team, penetration testing, or adversary emulation experience at any point in your career”
The ad says“Production experience building agentic or LLM-based security automation”
The ad says“Experience in ITAR, CMMC, or other regulated defense or government environments”
The ad says“Experience in ITAR, CMMC, or other regulated defense or government environments”
The ad says“Exposure to OT/ICS or manufacturing environment security”
The ad says“Red team, penetration testing, or adversary emulation experience at any point in your career”
The ad says“Red team, penetration testing, or adversary emulation experience at any point in your career”
As Tech Lead for Detection & Response, you will be the senior technical owner of how Hadrian detects, investigates, and responds to threats across our corporate, cloud, and factory environments. This is a hands-on senior IC role leading a small team: you will set the technical direction, build the next-generation AI-native detection stack, and lead from the keyboard
Own detection & response end to end — strategy, architecture, and hands-on engineering — across corporate, cloud, and factory environments
Design and build an AI-native D&R stack: detection-as-code, LLM-assisted triage and enrichment, and agentic response automation
Lead incident response from triage through containment, remediation, and postmortem, including high-severity scenarios
Set technical direction for a small detection & response team; mentor engineers and raise the bar on detections, playbooks, and tooling
Partner with IT, infrastructure, and compliance teams to meet ITAR and CMMC detection, monitoring, and response requirements
Benefits
100% coverage of platinum medical, dental, vision, and life insurance plans for employees 401k
Relocation stipend if you’re moving from outside of LA
Flexible vacation policy
Preferred experience
8+ years of security engineering experience with deep, hands-on detection & response expertise (SIEM, EDR, cloud and identity telemetry, SOAR)
Strong software engineering skills with detection-as-code and infrastructure-as-code fluency
Experience leading incident response end to end in production environments
Demonstrated application of AI/LLM tooling to security workflows — and sound judgment about its limits
A track record of setting technical direction as a tech lead, team lead, or anchor senior IC
Red team, penetration testing, or adversary emulation experience at any point in your career
Experience in ITAR, CMMC, or other regulated defense or government environments
Exposure to OT/ICS or manufacturing environment security
0→1 experience building a security capability at a fast-scaling startup
Production experience building agentic or LLM-based security automation
