Security Engineer, Detection and Response

Serval

3h ago • 1 views • 0 applications
Full-time On-site
San Francisco
$200,000 - $325,000
Full-time
Security Engineer

Job Description

Unleash Your Expertise: Detection and Response Lead at Serval

At Serval, we're not just building software; we're pioneering the future of enterprise operations with an AI-native automation platform. Imagine intelligent agents that don't just respond, but reason, act across complex systems, and continuously learn to replace manual processes and rigid legacy systems. That's Serval.

Founded in early 2024, our agentic AI platform already transforms natural language into production-grade workflows for industry leaders like Fox, Notion, Perplexity, Vercel, and Brex. From IT to HR, Finance, Security, Legal, and Engineering, we're rapidly becoming the universal AI operations layer, eliminating repetitive work and giving teams unprecedented leverage.

Backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, and Elad Gil, we're on a mission to automate the world’s workflows. Join us and shape the next generation of intelligent automation.

The Opportunity: Lead Detection & Response

As our Detection and Response Lead, you won't just maintain; you'll build, define, and scale the very foundations of Serval’s cybersecurity detection and response capabilities. This is a critical leadership role where you will strategically shape our security monitoring, incident response, recovery, and post-incident improvement programs across our vast infrastructure and the sensitive systems our customers trust us to operate.

We're looking for a hands-on leader with deep technical credibility, sharp operational instincts, and a passion for building world-class security. You will mentor a growing team, forge strong partnerships with Engineering and Product, and ensure that detection and response are inherently designed into every system that powers Serval – not as an afterthought, but as a core principle.

What You'll Drive

Architect, implement, and lead robust detection and response operations, spanning continuous monitoring, meticulous triage, in-depth investigation, swift containment, and effective remediation of security events across our diverse networks and cloud infrastructure.
Build, inspire, and directly mentor a high-performing team focused on observability, detection and response, and threat intelligence, strategically scaling these functions to match Serval's exponential platform and customer growth.
Instill world-class operational rigor and readiness, developing comprehensive incident playbooks, optimizing on-call and escalation paths, conducting realistic tabletop exercises, and continuously elevating the quality and speed of our response capabilities.
Elevate detection quality and coverage by closely partnering with engineering teams to ensure critical telemetry is consistently available, reliable, and actionable across our cloud, corporate, and production environments.
Collaborate deeply across Engineering, Product, and Infrastructure teams to embed detection and response capabilities into Serval's systems from inception, making security an inherent part of our design philosophy.
Forge a resilient security program capable of defending against sophisticated adversaries, including pioneering the use of Serval’s own cutting-edge AI agents to solve frontier security and security-operations challenges.

What You'll Bring

10+ years of progressive experience in cybersecurity, with profound expertise in detection engineering, incident response, and security operations.
Extensive, proven experience in building and leading high-performing teams across detection and response, instrumentation/observability, and threat intelligence.
Demonstrable stellar leadership skills and a track record of driving durable, continuous improvements across security programs, processes, and people.
Exceptional written and verbal communication skills, a calm demeanor under pressure, and the ability to effectively command and coordinate security incidents involving diverse stakeholders across various teams, expertise levels, and seniority.
Deep expertise in modern observability stacks, including SIEM, data lakes, EDR, cloud telemetry, and comprehensive logging solutions, coupled with a mastery of detection primitives.
A profound understanding of modern adversary tradecraft (TTPs) and demonstrated experience translating this knowledge into practical, effective detection strategies and decisive response actions.
A mission-oriented mindset, unimpeachable integrity, and an undeniable passion for detecting and responding to adversaries within a highly complex, fast-paced, and innovative environment.

Why Join Serval?

Unparalleled Impact: Be a foundational player in securing a truly novel AI platform, directly influencing the success and trustworthiness of our product and company. Your work will have immediate, visible impact.
Accelerated Growth: Build a fundamentally new AI product offering from the ground up with the robust support of our experienced team and top-tier investors. Grow rapidly both professionally and personally as the company scales.
Innovation Culture: Thrive in a dynamic culture that champions innovation, rewards ownership, demands accountability, and values having fun while building something extraordinary.
Cutting-Edge Challenge: Work at the intersection of AI and cybersecurity, leveraging and contributing to Serval’s own agentic technology to solve frontier security-operations problems.