{"id":3339529,"url":"https://alion.io/job/refractal-security-engineer-detection-response","title":"Security Engineer (Detection & Response)","company":{"id":4403779,"name":"Refractal","domain":"refractal-ai.com","url":"https://alion.io/company/refractal","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":60000,"max":115000,"currency":"GBP","period":"year","gross":null,"usd_annual":153603},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Datadog","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-08T13:30:52Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-31T14:25:28Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"About Refractal\nRefractal is an AI security company building the infrastructure organisations need to defend against autonomous AI threats. 2026 has shown that generally capable intelligence is here. The challenge now is modernising security to stop AI-enabled threats, whether they come from internal agents going rogue or from attackers using AI to become more dangerous.\nRefractal was founded on cybersecurity and AI expertise from MIT, Microsoft, NASA and the U.S. Navy. Our product lets organisations detect AI-enabled threats at low cost without sacrificing detection quality. We take a practical approach to AI risk, combining proven cybersecurity methods with frontier AI security research.\nToday, we work with governments and organisations that can't afford to get security wrong. We're backed by leading deep-tech and cybersecurity investors and are growing the team to deliver on this mission.\nThe role\nYou'll bring hands-on detection and response experience into Refractal's product. Working with our software and research engineers, you'll draw on your experience writing detection rules, using SIEMs and investigating threats to shape what we build.\nWhat you'll do\nTranslate detection and investigation workflows into product requirements, helping engineers understand what security teams need and why.\n\nUse your experience with detection rules and SIEMs such as Splunk and Datadog to guide product design and integration priorities.\n\nBuild realistic examples and test cases that capture attacker behaviour, benign activity and common sources of false positives.\n\nEvaluate product outputs for detection quality, useful context and the effort required for an analyst to reach a decision.\n\nWork with customers and colleagues to identify gaps, prioritise improvements and check that changes address practical security needs.\n\nSuccess in your first six months\nYou've translated important detection and response needs into clear product requirements and helped deliver improvements.\n\nYou've built representative test cases that help the team assess detection quality and investigation usefulness.\n\nYou've established a feedback loop that brings practitioner experience into engineering and research decisions.\n\nAbout you: essential\nHands-on experience writing and tuning detection rules, with examples of how you assessed whether they worked.\n\nPractical experience using SIEM platforms, including Splunk or Datadog, to query security data and investigate activity.\n\nExperience in detection and response, with a clear understanding of analyst workflows, false positives and gaps in security telemetry.\n\nThe ability to explain security problems to software engineers and translate your experience into requirements and test cases.\n\nAn interest in building products and a willingness to challenge assumptions using evidence from practical security work.\n\nNice to have\nExperience contributing to a security product or working closely with software and research engineers.\n\nScripting skills for preparing data, prototyping ideas or creating repeatable security tests.\n\nAn interest in how AI changes attacker behaviour and the security of autonomous agents.\n\nOur values\nRadical transparency. We believe the best work happens when everyone feels able to give and receive honest, constructive feedback.\nPublic service. We see AI security as a form of public service. Getting the AI transition right means putting the right infrastructure in place to manage the threats that come with it, and our work helps protect the institutions and services society depends on.\nFail fast. We test ideas early, seek feedback and learn quickly. We experiment rapidly and change course when something isn't working, without compromising on security.\nPragmatism, not dogmatism. We choose approaches based on how well they solve the problem. That means combining established cybersecurity methods with frontier AI research, questioning our assumptions, and changing our minds when the evidence changes.\nCompensation and benefits\nSalary: £60,000-£115,000\n\nCompetitive equity to share in Refractal's growth\n\nPension contribution\n\nPrivate medical and dental cover\n\nVisa and relocation support","description_format":"text","description_chars":4172,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Artificial Intelligence","Cybersecurity","Information Security","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-10-27T15:00:00Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.72,"p_room":0.75,"age_days":22,"expected_fill_days":25,"reasons":["conf:3","velocity","win:late"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":153603,"is_top_pay":false},"html_url":"https://alion.io/job/refractal-security-engineer-detection-response","json_url":"https://alion.io/job/refractal-security-engineer-detection-response.json","meta":{"generated_at":"2026-10-31T16:12:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25317,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4403779},"rest":"https://alion.io/mcp/rest/get_company?id=4403779"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frefractal-security-engineer-detection-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frefractal-security-engineer-detection-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frefractal-security-engineer-detection-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/refractal-security-engineer-detection-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frefractal-security-engineer-detection-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3339529}},{"tool":"search_jobs","arguments":{"company":"refractal-ai.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3339529},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}