Staff Detection Engineer

FluidStack

Lead Detection Engineer responsible for detection engineering on Fluidstack's AI security team. Building and tuning production detections to secure critical AI infrastructure with cutting-edge technology.

Posted 7/17/2026full-timeSan Francisco • California • 🇺🇸 United StatesLead💰 $250,000 - $330,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in detection engineering, including building and tuning production detections as code, applying machine learning and behavioral analytics, and establishing engineering standards and quality metrics. Proficient in threat research and incident response, with a focus on closing detection-to-response loops.

Highest-signal resume keywords

Detection EngineeringMachine Learning ApplicationBehavioral AnalyticsCI/CD Pipeline EngineeringThreat Research

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Production DetectionsDetection-as-CodePrecision and Recall MeasurementAnomaly DetectionAgentic Capabilities DevelopmentLLM-Based ToolingCoverage Methodology DefinitionQuality Metrics EstablishmentCross-Domain DetectionsIncident Response

Tools & Technologies

SIEMEDRCloud TelemetryDetection PipelinesSigmaPanther

Industry Keywords

IT SurfaceOT DetectionThreat IntelligenceSecurity ResearchDetection Function Development

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Lead detection engineering for Fluidstack's IT surface, including cross-domain detections where IT bridges OT or physical surfaces.
Author and tune production detections as code, with peer review, CI/CD, and measured precision and recall.
Apply AI and machine learning to build detections, including behavioral analytics and anomaly detection at scale.
Develop novel detection tooling, including agentic capabilities that use LLMs for triage, investigation, and response.
Set the engineering standards, coverage methodology, and quality metrics for the detection engineering discipline.
Conduct threat and security research that informs detection logic and surfaces coverage gaps, and partner with platform engineers, IR, and threat intel to close the detection-to-response loop.

Requirements

What you’ll need

You've built and tuned production detections as code, measured by precision and recall, not alert volume.
You work fluently across SIEM, EDR, and cloud/IT telemetry, and you've engineered detection pipelines with CI/CD and peer review.
You've applied ML or behavioral analytics to detection at scale, and you're fluent with LLM-based tooling for triage and investigation.
You set standards others inherit. You've defined coverage methodology and quality metrics for a detection function, or you're ready to.
You do threat research that drives new detections, and you close the loop with incident response and threat intelligence.
Bonus: Detection-as-code frameworks (Sigma, Panther). OT or physical-surface detection. Agentic/LLM security tooling. Building a detection function from the ground up.

Benefits

Comp & perks

Competitive total compensation package (salary + equity)
Retirement or pension plan, in line with local norms
Health, dental, and vision insurance
Generous PTO policy, in line with local norms