{"id":2561054,"url":"https://alion.io/job/brain-co-security-engineer-detection-response","title":"Security Engineer, Detection & Response","company":{"id":2051367,"name":"Brain Co.","domain":"brain.co","url":"https://alion.io/company/brain-7","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":80,"open_postings":33,"ghost_share":0.242,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":139,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":273000,"period":"year","method":"role_country_seniority_unknown","sample_n":3177},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-14T19:43:09Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T12:08:11Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":0},"description":"Our Mission\nRebuild how the world works, to make institutions work better for the people they serve.\nAbout Brain Co.\nBrain Co. builds AI-native operating systems for large, regulated institutions. Each system is built for a specific industry, powered by agents that push real workflows forward. Underneath it all is Atlas, our proprietary platform that keeps customers in control, secure by design, and never locked into one model.\nWhy Now\nBrain Co. is entering its next phase of production deployments on a national scale with an elite team built from Palantir, Google, Meta, and Nvidia, and a growing footprint across government, insurance, health, and financial services.\nJoining now means shaping both the company and a new category of applied AI. Every project here ships to production and is expected to create measurable customer value and impact.\nYou'll work alongside exceptional peers on some of the hardest problems in applied AI. It’s the kind of work you'll still be proud of in ten years from now.\nAbout the Role\nWe are looking for a Security Engineer, Detection & Response to build and operate our detection and response capabilities as Brain Co. expands. Reporting directly to the Head of Security, you will partner closely with engineering, infrastructure, infrastructure security, IT, and operational teams to protect our environments and respond effectively to security incidents.\nThis is an engineering-focused builder role rather than a passive alert-monitoring position. You will strengthen our security posture from the ground up: designing high-signal detections, automating triage and investigation workflows, leading cross-functional incident response, and converting incident findings into safer engineering defaults across the company.\nThe program is early enough that your judgment will shape the tooling, workflows, metrics, and operating model-not just the alerts you investigate. You will have significant autonomy to improve signal quality, streamline integrations, and turn incident lessons into stronger engineering defaults across the organization.\nWhat You’ll Build & Own\nDesign, build, and maintain automation, playbooks, and systems for timely triage, investigation, and incident response, using sound software engineering practices and modern AI tools where they add value.\n\nDevelop and refine high-signal detections so security findings are actionable and noise is minimized.\n\nIntegrate security telemetry and tooling across our cloud and application stack to enable consistent investigation and self-service triage.\n\nLead cross-functional incident response across applications, cloud infrastructure, endpoints, identity, and internal services.\n\nTranslate incident data and response metrics into secure-by-design improvements alongside product and infrastructure teams.\n\nContinuously evaluate response procedures and partner across engineering, infrastructure security, IT, and operational teams to close gaps and improve the operating model.\n\nWhat We’re Looking For\nDemonstrated capability in security engineering, detection engineering, or incident response.\n\nHands-on experience investigating security incidents or suspicious behavior in complex environments.\n\nPractical experience with EDR, SIEM, SOAR, log-management, or equivalent detection-and-response tooling.\n\nAbility to write code and build software automation or detections in at least one relevant scripting or query language.\n\nStrong understanding of modern cloud infrastructure and SaaS security principles.\n\nSound risk-based judgment when prioritizing threats and operational tasks.\n\nAbility to make sound, timely decisions with incomplete information during active incidents.\n\nClear communication and cross-functional collaboration skills during high-pressure situations.\n\nPreferred Experience\nBuilding self-serve security triage automation or AI-assisted response capabilities.\n\nThreat hunting, digital forensics, threat intelligence, or infrastructure-as-code security controls.\n\nInvestigating complex security events within containerized or Kubernetes-based cloud environments.\n\nTranslating security incident trends into architectural or systemic engineering improvements.\n\nExperience navigating security challenges in fast-paced, high-growth startup environments.\n\nOn-Call Expectation\nThis position includes participation in a regular on-call rotation to support rapid response to critical security incidents and maintain operational resilience.\nEqual Opportunity and Accessibility\nBrain Co. is an equal opportunity employer. We make employment decisions without regard to race, color, religion, sex, national origin, age, disability, genetic information, or any other status protected by applicable federal, state, or local law. We provide reasonable accommodations for applicants and employees with disabilities or sincerely held religious beliefs - contact  to request one.\nReady to build with us?","description_format":"text","description_chars":4934,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Operating Systems","AI Agents","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-14T20:39:16Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":139,"reasons":["conf:1","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/brain-co-security-engineer-detection-response","json_url":"https://alion.io/job/brain-co-security-engineer-detection-response.json","meta":{"generated_at":"2026-10-15T14:42:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22340,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2051367},"rest":"https://alion.io/mcp/rest/get_company?id=2051367"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrain-co-security-engineer-detection-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrain-co-security-engineer-detection-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrain-co-security-engineer-detection-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brain-co-security-engineer-detection-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrain-co-security-engineer-detection-response"}]}