Engineering Manager - Incident Response

Role overview Benchling is looking for a Detection and Response Engineer in San Francisco, CA. This role focuses on protecting company systems and applications from security threats. The engineer will use experience in incident response and threat detection to help maintain strong security and system integrity.

About Our TeamAt OpenAI, our commitment to security is integral to our mission of ensuring that artificial general intelligence serves the betterment of humanity.Our dedicated Security team safeguards OpenAI's innovative technology, workforce, and products. We emphasize a technical yet operational approach, supporting all research and products across the organization. Our core principles include prioritizing impactful security measures, empowering researchers, preparing for future technologies, and cultivating a robust security culture.About This OpportunityAs a Security Engineer specializing in Detection and Response, you'll collaborate with our talented engineers and researchers to build, manage, and secure groundbreaking AI technologies. Your role will encompass all facets of Detection & Response, contributing as a versatile generalist within the Security team. Key responsibilities include:Lead initiatives across various security domains including Application Security, Infrastructure Security, Offensive Security, and Detection and Response.Innovate solutions to address emerging security challenges.Collaborate on pioneering AI research and leverage AI to enhance OpenAI’s security posture.This position may be based in San Francisco, CA, Seattle, WA, or New York City, NY. We adopt a hybrid work model, requiring three days in the office per week, and provide relocation assistance for new hires.Your Contributions Will Include:Innovating and enhancing Detection and Response infrastructure.Developing tools for the management of detection rule lifecycles.Creating, measuring, and refining detection rules for effective and sustainable operations.Automating manual response workflows.Ensuring visibility and management of OpenAI’s endpoint fleet (macOS, Windows).Driving advancements in identity access management (IAM), device management, and our utilization of public cloud services (e.g., AWS, Microsoft Azure).You Will Excel in This Role If You Have:Experience in cybersecurity or a related field.Familiarity with Microsoft Azure and/or other cloud infrastructure platforms.Strong problem-solving skills and a passion for security innovation.

Join Klaviyo as a Senior Security Engineer specializing in Detection and Response. In this critical role, you will be at the forefront of safeguarding our systems and data, ensuring our clients' security. Collaborate with talented professionals in a dynamic environment where your expertise will directly impact our security posture.

Join our dynamic Security Engineering team as a Senior Security Engineer specializing in Detection and Incident Response. In this pivotal role, you will blend the realms of security operations and software engineering, not only investigating incidents but also developing the systems that detect, contain, and prevent them. Your contributions will involve designing and deploying high-precision detection mechanisms across cloud services and enterprise SaaS platforms, crafting automation to expedite response times, and enhancing telemetry pipelines essential for robust security measures.Your expertise in coding will be as vital as your incident triaging skills. You will structure investigations, analyze root causes, and clearly communicate the implications of security incidents to both technical and non-technical stakeholders. Additionally, you'll leverage these insights to drive lasting engineering improvements, resulting in better detections and smarter automation.

About Scribd:At Scribd Inc., we ignite curiosity and foster a vibrant ecosystem of stories and knowledge. Our mission is to democratize access to ideas and empower collective wisdom through our innovative platforms: Everand, Scribd, Slideshare, and Fable. Join us as we create an inclusive environment where creativity and collaboration thrive.We believe in cultivating a culture where authenticity and boldness flourish—encouraging open discussions and commitment to our goals while embracing the unexpected. Every team member is empowered to prioritize customer needs and take meaningful actions.Our flexible work policy, Scribd Flex, enhances individual work styles while fostering community connections. We encourage team members to collaborate intentionally through in-person moments, regardless of their location.We're looking for team members who embody "GRIT"—a blend of passion and perseverance towards long-term objectives. We seek individuals who can set and achieve Goals, deliver Results, offer Innovative solutions, and positively impact the Team's culture through collaboration.Role OverviewAs a Senior Security Engineer on our Infrastructure Security team, you'll play a crucial role in safeguarding our applications, platforms, and users. As we scale, we're enhancing our Detection & Response capabilities, transitioning towards a time-based security model that prioritizes speed, signal quality, and resilience as core design principles.

Role Overview Writer Inc. is hiring a Security Engineer focused on Detection and Response in San Francisco, CA. This position centers on building and maintaining security controls that safeguard the company’s digital assets. What You Will Do Develop and implement security measures to protect systems and data. Collaborate with teams across the company to strengthen security practices. Respond to security incidents and help improve incident response processes. Location This role is based in San Francisco, CA.

As an Incident Manager in the Detection & Response team, you will play a pivotal role in safeguarding our systems and data. You will be responsible for leading incident response efforts, coordinating with various teams to ensure rapid resolution of incidents, and enhancing our incident management processes. This position requires a keen understanding of security vulnerabilities and incident management best practices.

At Discord, we empower over 200 million users each month to connect, communicate, and collaborate in their gaming experiences. With more than 90% of our users engaging in video games, our platform serves as a vital hub for gaming communities. Our mission is to enhance the social aspect of gaming by enabling seamless interactions among players before, during, and after gameplay.Discord is dedicated to fostering a sense of belonging for all users. Our commitment to security and privacy ensures that communications remain safe and confidential, which is essential to our continued success.We are on the lookout for a talented Senior Detection and Response Engineer to join our dynamic Detection & Response Team (DART). Our team is focused on engineering innovative detection systems, automating response processes, and developing tools to proactively combat threats rather than merely responding to them. If you are passionate about security and enjoy transforming investigative insights into robust automated solutions, we would love to hear from you!

Role Overview Pinterest is hiring a Security Software Engineer II focused on Detection and Response. This role can be based in San Francisco, CA or remote within the US. What You Will Do Develop and refine detection strategies to identify security threats across the Pinterest platform. Implement and improve response protocols to address incidents efficiently. Work closely with teams from different disciplines to spot vulnerabilities and strengthen defenses. Support efforts to reduce incident response times and protect the safety of Pinterest’s user community. Location This position is open to candidates in San Francisco, CA or remote within the United States.

Join Cloudflare as a Threat Detection and Incident Response Intern for the Summer of 2026! This exciting opportunity is designed for students who are passionate about cybersecurity and eager to learn about detecting and responding to threats in a dynamic environment. You will work alongside experienced professionals, gaining hands-on experience that will enhance your skills and prepare you for a successful career in the field.

Embark on an exciting journey as a Threat Detection and Incident Response Intern at Cloudflare for the summer of 2026. This internship will provide you with the hands-on experience needed to thrive in the field of cybersecurity. You will work closely with our expert team to monitor, analyze, and respond to security incidents while contributing to innovative projects that protect our global network.

About Our TeamAt OpenAI, our Security organization is dedicated to fostering safe and responsible innovation on a global scale. As our systems, infrastructure, and research capabilities expand, we are committed to investing in top-tier security measures that protect our people, products, and users while maintaining our momentum in progress.Our team is focused on safeguarding OpenAI’s environments by developing sophisticated detection systems, enhancing real-time response capabilities, scaling telemetry and logging infrastructure, and providing actionable threat intelligence to proactively counter adversaries.About the RoleWe are on the lookout for a Global Detection and Response Lead who will take ownership of and enhance OpenAI’s cybersecurity detection and response operations. In this pivotal role, you will establish the strategy and oversee the execution of security monitoring, incident response, recovery, and post-incident enhancements across our global infrastructure.As a hands-on leader with substantial technical credibility and acute operational instincts, you will build and mentor high-performing teams, collaborate closely with Infrastructure, Research, Product Security, Enterprise Security, IT, and Engineering to ensure that detection and response capabilities are integrated into the systems that drive OpenAI.This role demands strategic thinking combined with practical leadership skills, requiring deep technical expertise, operational discipline, and the ability to cultivate high-performing teams in a dynamic environment.Key Responsibilities:Lead global detection and response operations, ensuring continuous monitoring, triage, investigation, containment, and remediation of security incidents across diverse networks and infrastructures.Mentor and manage several teams of senior engineers focused on observability, detection and response, and threat intelligence, strategically expanding these functions as OpenAI’s computational capacity and platform aspirations grow.Ensure exceptional operational readiness through management of incident response playbooks, on-call procedures, escalation protocols, and ongoing enhancements to response efficacy and agility.Enhance detection effectiveness by collaborating with engineering teams to ensure essential telemetry is accessible, reliable, and actionable across cloud, corporate, and production environments.Work collaboratively across all departments to assess and address emerging security challenges and risks.

About Our TeamAt OpenAI, we believe that the development of artificial general intelligence must be conducted in a way that is safe and beneficial for all of humanity. Security is paramount to our mission and underpins every aspect of our work.Our Security team is dedicated to safeguarding OpenAI’s technology, personnel, and products. We adopt a highly technical approach to our creations while maintaining operational excellence in execution. Our core tenets include prioritizing impactful initiatives, empowering our researchers, anticipating future technological advancements, and fostering a robust security culture.About the PositionAs a Security Engineer specializing in insider threat detection and response, you will collaborate with our talented engineers and researchers to build and secure groundbreaking AI technologies. This role emphasizes the identification and mitigation of insider threats, ensuring the protection of OpenAI's most sensitive assets. Key responsibilities will include:Key Responsibilities:Innovate and enhance our detection and response infrastructure to automate comprehensive workflows for detection and investigation.Develop, assess, and refine detection rules to guarantee effective and sustainable operations.Lead projects across OpenAI’s technology landscape focusing on insider threats, including access abuse and intellectual property theft, as well as emerging risks associated with AI infrastructure.Collaborate with cross-functional teams such as HR, Legal, and investigative units, providing technical insights and evidence to support thorough investigations.Engage in pioneering AI research initiatives, leveraging AI to bolster OpenAI’s security framework.Ideal Candidate Profile:A minimum of 5 years of experience in a detection/response or insider risk role; we welcome both mid-level and senior applicants.Proficient in operating systems and platforms, including macOS, Windows, Linux, and Kubernetes, with hands-on experience in cloud infrastructure.Strong knowledge of modern adversarial tactics, data exfiltration methods, and experience in managing and leading incident responses.Demonstrated proficiency in scripting languages such as Python, Bash, or PowerShell.Possess excellent analytical and problem-solving skills, with a keen attention to detail.

Join Cloudflare as a Detection & Mitigation Engineer, where you will play a pivotal role in enhancing our cybersecurity measures. Your expertise will help us identify and neutralize threats before they impact our clients. In this hybrid position, you will collaborate with a talented team to develop innovative solutions that safeguard our network infrastructure.

Role Overview Cloudflare, Inc. is hiring a Response Engineer to deliver technical support and solutions to clients from our in-office location. This role focuses on resolving customer inquiries, troubleshooting problems, and offering clear technical guidance. What You Will Do Respond to client questions and requests for assistance Diagnose and resolve technical issues Provide timely, accurate support in a busy setting Who Thrives Here This position suits those who enjoy working with technology and take pride in delivering reliable customer service.

Mercor is looking for a Software Engineer specializing in fraud detection. This full-time position is based in either San Francisco or New York City. The focus is on building and refining systems that protect both the company and its clients from fraudulent activity. Key responsibilities Design and develop tools to identify and reduce fraud across mercor’s platforms. Implement solutions that detect suspicious patterns and prevent threats before they escalate. Collaborate with colleagues from various disciplines to strengthen fraud detection strategies. Collaboration and technology This role requires regular interaction with engineering, product, and other internal teams. The work involves using modern technology to keep mercor’s systems secure and resilient.

About the RoleOpenAI is seeking a dynamic Engineering Manager to spearhead a team dedicated to creating innovative software systems that proactively detect and mitigate the misuse of cutting-edge AI models. In this pivotal role, you will be at the forefront of building production services, detection pipelines, and preventive mechanisms that safeguard the integrity of our frontier models while minimizing the risk of high-severity misuse.This position is primarily focused on system development; therefore, we are looking for a candidate with a robust software engineering background who is adept at constructing reliable systems capable of scaling to billions of users.Your Responsibilities:Lead a team of skilled software engineers in designing and developing detection and mitigation systems aimed at preventing frontier model misuse, particularly focusing on model intellectual property protection and distillation detection.Establish the technical roadmap and execution strategy: prioritize tasks, design solutions, implement them, iterate based on feedback, and measure impact.Develop scalable production systems: services, pipelines, tooling, instrumentation, and automation that align with the usage of frontier models.Collaborate closely with Research and Product teams to translate evolving model capabilities into actionable tests, signals, and mitigations deployable at scale.Champion strong engineering principles: architecture design, system reliability, performance monitoring, and operational excellence.Recruit and nurture an exceptional team across backend systems, data engineering, and applied machine learning domains.Anticipate potential failures at scale as agentic workflows become increasingly sophisticated.Ideal Candidate Profile:Experience in building systems within adversarial and rapidly changing environments.Comfortable navigating ambiguity and novel situations.Familiarity with security-related domains (e.g., abuse prevention, fraud detection, platform defense, authentication/identity, and managing adversarial environments).Ability to communicate effectively and build trust with senior stakeholders—demonstrating a pragmatic, collaborative approach while remaining composed under scrutiny.Proven track record of leading engineering teams and delivering production systems from inception to deployment.Strong technical acumen in system design, distributed architectures, data pipelines, and operational observability.

Join our dynamic team at Mercury as a Staff Software Engineer specializing in Fraud Detection. In this role, you will leverage your engineering expertise to develop innovative solutions that enhance our fraud prevention strategies. Collaborate with cross-functional teams to design and implement scalable systems that protect our users and ensure the integrity of our platform.We are looking for a passionate engineer who thrives in a fast-paced environment and is eager to take on challenges that impact our customers' experience. Your contributions will play a crucial role in shaping the future of financial security.

About CrunchyrollFounded by fans, Crunchyroll is dedicated to delivering the art and culture of anime to a vibrant community. Connecting over 100 million anime and manga enthusiasts across 200+ countries and territories, we create experiences that resonate, whether through online streaming, theatrical releases, games, merchandise, or events. Join us in shaping the future of anime!About the RoleAs a Senior Machine Learning Engineer focusing on Fraud Detection, you will collaborate with the Director of Data Science and Machine Learning within our Center for Data and Insights. This position can be based in either the Los Angeles or San Francisco area.Your expertise will drive the design and implementation of scalable machine learning models aimed at detecting account sharing fraud. Utilizing user behavior data such as geolocation, concurrent sessions, and device profiles, you will work closely with data scientists, product analysts, and data engineers to transform research prototypes into production systems that improve detection accuracy while minimizing user disruption. Your contributions will align with industry best practices, driving subscriber growth in our VOD streaming platform.Core Areas of ResponsibilityDesign and implement machine learning algorithms, including real-time anomaly detection models to identify unauthorized account sharing.Develop comprehensive ML pipelines for data preprocessing, model training, evaluation, and deployment leveraging cloud platforms.Optimize models for performance, scalability, and efficiency to accommodate high-volume streaming data.Integrate machine learning solutions with existing systems via APIs while establishing monitoring for model drift and retraining.Collaborate on A/B testing and iterative improvements to refine algorithms in response to evolving evasion tactics.