Staff Security Engineer (AI-Driven Detection & Response)

Join Fullscript as a Staff Security Engineer, where you will define and drive our defensive threat detection, incident response, and AI-assisted SecOps capabilities across our cloud infrastructure, identity, endpoints, and application ecosystems. You will architect modern detection systems, leverage AI/ML to automate SecOps workflows, and establish defensive testing practices for AI threat vectors. This role requires a strong background in detection engineering, incident response, and security engineering, with a focus on AI-specific threat vectors.

- Definir y dirigir la detección de amenazas defensivas, la respuesta a incidentes y la capacidad de SecOps asistida por IA en la infraestructura de la nube. - Arquitectar sistemas de detección modernos, aprovechar la IA/ML para automatizar los flujos de trabajo de SecOps y establecer prácticas de prueba defensiva para los vectores de amenaza de IA. - Colaborar con los equipos de Ingeniería y Plataforma para garantizar que nuestras capacidades de detección y respuesta escalen con la infraestructura de Fullscript.

- The ideal candidate has owned enterprise-scale detection engineering and incident response end-to-end. You are a pragmatic, forward-thinking engineer who excels at designing AI-augmented SOC workflows, conducting targeted AI defensive testing, and converting threat telemetry into automated, high-precision detection and response systems - Working knowledge of adversary tradecraft (MITRE ATT&CK) and the ability to translate it into practical, tuned detections rather than noisy alerts - Experience managing security controls as code (e.g., Terraform), with changes made through peer review rather than manual console changes - 8+ years of experience in detection engineering, incident response, or security engineering, with demonstrated leadership in shaping organizational security strategy - Practical experience incorporating AI tooling into SecOps workflows, along with familiarity with detection strategies for AI-specific threat vectors - Hands-on incident response experience: triage, investigation, containment, and postmortem/playbook development - Experience securing cloud environments (AWS preferred) and modern SaaS/identity stacks - Strong scripting/automation skills (Python, JavaScript, or similar) and experience building workflows in a SOAR-style or workflow automation platform - Proven ability to partner directly with engineering and infrastructure teams to define telemetry and control requirements for systems you don't own - Excellent written communication. This role regularly turns investigation findings into clear, factual updates for technical and non-technical stakeholders alike - Experience contributing to or building from open detection content, such as Sigma rules or community rule repos - Experience collaborating with red/purple-team exercises to validate detection coverage - Experience supporting a healthcare, regulated, or otherwise highly sensitive-data environment - Relevant certifications (GCIH, GCFA, GCTI, GCDA, or equivalent practical experience)