Anyscale Logo

Anyscale

Senior Detection and Response Engineer

Posted Yesterday
Be an Early Applicant
In-Office
San Francisco, CA, USA
200K-240K Annually
Senior level
In-Office
San Francisco, CA, USA
200K-240K Annually
Senior level
Own detection engineering and incident response across cloud, endpoint, runtime, corporate, and production environments. Build centralized correlation and alerting, develop runbooks, lead live incident response, tune detections, measure response performance, conduct retrospectives, and partner with infrastructure security and IT to close security gaps. The role also includes detecting anomalous activity in Kubernetes and scaling the organization’s detection and response capabilities.
The summary above was generated by AI

At Anyscale, we're on a mission to democratize distributed computing and make it accessible to software developers of all skill levels. We’re commercializing Ray, a popular open-source project that's creating an ecosystem of libraries for scalable machine learning. Companies like OpenAI, Uber, Spotify, Instacart, Cruise, and many more, have Ray in their tech stacks to accelerate the progress of AI applications out into the real world.

With Anyscale, we’re building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert.

Proud to be backed by Andreessen Horowitz, NEA, and Addition with $250+ million raised to date.

About the Role

Anyscale's need to detect and respond to security events across its production and corporate environments is growing as the company scales. We're looking for a Senior Detection and Response Engineer to own detection engineering and to lead incident response when it counts, coordinating the response and driving it to resolution.

This is a high-ownership role with real room to shape how detection and response works at Anyscale. You will own the detection pipeline, the response runbooks, and incident response, reporting to the Head of Security and partnering with engineering. This role is based in India.

In your first year, success looks like strong detection coverage across our cloud, endpoint, and runtime telemetry, a working correlation and alerting pipeline, and incident response runbooks that have been exercised in practice.

What You'll Do
  • Own and build detection coverage across cloud, endpoint, and runtime telemetry.

  • Own a centralized correlation and alerting capability that turns telemetry into actionable detections.

  • Own incident response: runbooks, escalation paths, and coordination during an incident, across corporate and production environments.

  • Drive detection of anomalous activity across the environments we run, including our Kubernetes footprint.

  • Tune detections to keep signal high and noise low, and measure detection and response performance such as mean time to detect and respond.

  • Run incident retrospectives and feed lessons back into detections and controls.

  • Partner with infrastructure security and IT to close gaps surfaced during response.

What You'll Bring
  • 6+ years in security, with a strong focus on detection engineering and incident response, ideally at a high-growth startup.

  • Hands-on experience building detections and correlation across cloud (AWS, Azure), endpoint (EDR), and ideally container and runtime telemetry.

  • Experience owning incident response end to end, including leading during live incidents.

  • Comfort building and scaling a detection and response capability, not only operating an existing one.

  • Sound judgment under pressure and clear communication during incidents.

  • Fluency working with engineers and IT to close the gaps that response surfaces.

Nice to Have
  • Experience with SIEM or detection platforms and detection-as-code approaches.

  • Familiarity with runtime security tooling such as Upwind or similar.

  • Threat hunting or purple-team experience.

  • Background in AI or ML platforms or distributed systems.

Why Anyscale
  • We're on a mission to make scalable computing effortless. Ray is the AI Compute Engine at the center of some of the world's most powerful AI platforms

  • Our tech is in production at companies like OpenAI, Uber, Spotify, Instacart, and Cruise

  • We're backed by Andreessen Horowitz, NEA, and Addition, with $250M+ raised to date

  • Recent partnerships with Azure, CoreWeave, and Google Cloud are putting AI-native compute directly into enterprise environments

  • Competitive salary and equity, plus health/dental/vision coverage (many plans up to 99% employer-covered)

  • We offer flexible time off, paid parental leave, and mental health support

Anyscale Inc. is an Equal Opportunity Employer. Candidates are evaluated without regard to age, race, color, religion, sex, disability, national origin, sexual orientation, veteran status, or any other characteristic protected by federal or state law.

 

Anyscale Inc. is an E-Verify company and you may review the Notice of E-Verify Participation and the Right to Work posters in English and Spanish

HQ

Anyscale San Francisco, California, USA Office

San Francisco, CA, United States, 94105

Anyscale Palo Alto, California, USA Office

Palo Alto, United States

Similar Jobs

13 Hours Ago
In-Office or Remote
7 Locations
185K-327K Annually
Senior level
185K-327K Annually
Senior level
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.
Top Skills: Application SecurityArtificial IntelligenceCloud SecurityEndpoint SecurityIdentity SecurityNetwork SecurityPythonSaaSSQL
8 Days Ago
Hybrid
Sunnyvale, CA, USA
140K-215K Annually
Senior level
140K-215K Annually
Senior level
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Develop full-stack tools and automation for deploying and managing cloud infrastructure. Responsibilities include designing software solutions, collaborating with business partners, developing architecture and automation strategies, reporting on projects, and providing technical leadership. The role requires React and Go development, API integration, CI/CD, automated testing, version control, security-focused coding, troubleshooting, documentation, and applying AI technologies to improve workflows and decision-making.
Top Skills: Ai TechnologiesCi/CdCloud InfrastructureCSSGitGoGraphQLHTMLJavaScriptReactRest
23 Days Ago
Easy Apply
Hybrid
San Francisco, CA, USA
Easy Apply
142K-212K Annually
Senior level
142K-212K Annually
Senior level
Consumer Web • eCommerce • Marketing Tech • Retail • Software • Analytics • Generative AI
Develop and operate detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include building detections-as-code, triaging alerts, leading incident response and forensic investigations, threat hunting, automating workflows, maintaining SIEM and security data pipelines, developing AI-enabled security tooling, and participating in on-call rotations. The role also involves threat intelligence collaboration, security engineering mentorship, and continuous improvement of detection and response systems.
Top Skills: AICi/CdCloud PlatformsData PipelinesGitGitGoPythonSecurity Data LakesSIEMSplunkSQL

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account