{"id":27799,"url":"https://alion.io/job/serval-security-engineer-detection-and-response","title":"Security Engineer, Detection and Response","company":{"id":40713,"name":"Serval","domain":"serval.com","url":"https://alion.io/company/serval-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":78,"open_postings":15,"ghost_share":0,"stale_share":0.867,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":200000,"max":325000,"currency":"USD","period":"year","gross":null,"usd_annual":325000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false},{"name":"AI Agents","optional":true},{"name":"Perplexity","optional":true},{"name":"Vercel","optional":true}],"status":"live","first_seen_at":"2026-06-11T21:38:29Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-20T02:45:10Z","board_verified":true,"closed_at":null,"days_open":130,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":130},"description":"Who We Are\nServal is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end - replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations.\nAt the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests - they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering.\nOur mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer - a system of agents that sits across business functions and runs the workflows that keep modern companies moving.\nWe’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others.\nRole Overview\nAs Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in.\nYou'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval.\nWhat You'll Do\nDesign, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure.\n\nBuild, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow.\n\nEnsure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed.\n\nImprove detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments.\n\nPartner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought.\n\nBuild a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems.\n\nWhat You'll Need\nHave 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations.\n\nHave deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams.\n\nHave stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people.\n\nHave exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority.\n\nHave deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives.\n\nUnderstand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions.\n\nAre mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment.\n\nWhat We Offer\nImpact: Be a key player in shaping the success of our product and company.\n\nGrowth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company.\n\nCulture: Join a culture that values innovation, ownership, accountability, and fun.","description_format":"text","description_chars":4549,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Service & Asset Management","AI Agents"],"lifecycle":[{"event":"open","at":"2026-06-11T21:38:29Z"},{"event":"close","at":"2026-08-13T11:36:38Z"},{"event":"reopen","at":"2026-09-10T16:00:55Z"},{"event":"close","at":"2026-10-06T18:12:24Z"},{"event":"reopen","at":"2026-10-07T06:39:36Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":172500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.48,"p_room":0.28,"age_days":129,"expected_fill_days":52,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":325000,"is_top_pay":true},"html_url":"https://alion.io/job/serval-security-engineer-detection-and-response","json_url":"https://alion.io/job/serval-security-engineer-detection-and-response.json","meta":{"generated_at":"2026-10-20T05:04:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5624,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":40713},"rest":"https://alion.io/mcp/rest/get_company?id=40713"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fserval-security-engineer-detection-and-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fserval-security-engineer-detection-and-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fserval-security-engineer-detection-and-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/serval-security-engineer-detection-and-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fserval-security-engineer-detection-and-response"}]}