Detection and Response Engineer

About the role

The role combines detection engineering, incident investigation, response automation, telemetry requirements, playbooks, and operational measurement.

What you'll do

• Develop and tune high-signal detections and measure their coverage and precision.
• Investigate suspicious activity, establish scope, preserve evidence, and support containment and recovery.
• Automate repetitive triage, enrichment, containment, and evidence-collection workflows.
• Work with security and engineering teams on telemetry, threat models, and response playbooks.

What we're looking for

• Hands-on experience in threat detection, incident response, or both.
• Experience developing detections, running investigations, and improving response procedures.
• Scripting or software engineering skills for security automation and tooling.
• Clear judgment and communication during time-sensitive security events.

Preferred experience

• Experience with cloud, identity, endpoint, container, or network telemetry.

Equal opportunity

Entlegnant, the company behind Leiolai, is an equal opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, ancestry, age, disability, veteran status, genetic information, or any other status protected by law.

Applicants must be at least 18. If you need an accommodation during the application process, email talent@leiolai.com.