LangChain
Security Engineer - Detection & Response
San Francisco, CA · Senior
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- You'll be the hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and the services that host and execute agentic workloads.
- We are looking for engineers who think like builders, not just operators - strong software skills are a must.
- This role participates in an incident on-call rotation, but its core focus is engineering systems that reduce risk, speed up investigations, and make incidents less frequent and less costly.
Responsibilities
- Own the detection lifecycle:
- Build security monitoring and telemetry:
- Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane.
- Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment.
- Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code.
- Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane. Instrument services, define the signals that matter, and make security data reliable and useful.
- Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment. Turn investigation findings into new detections and lasting improvements.
- Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine security work.
- Design human-in-the-loop controls and evaluations so automation is safe, observable, and trustworthy.
- Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes.
Requirements
- Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable detections.
Nice to have
- Proficiency using AI tooling to accelerate security investigations and engineering work.
- Understanding of AI threats, adversarial testing, and the security boundaries of LLM and agent workloads.
- Exposure to SOC 2 or ISO 27001 monitoring and evidence automation.
- Experience with infrastructure as code such as Terraform or Helm.
- Experience securing both SaaS and self-hosted or air-gapped deployments.
- Compensation Philosophy:
- We will tell you early where you're tracking and talk comp with you before offer stage.
Compensation
- We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks.
- We are hiring for this role across a range of scope, and the compensation band reflects that.
- $185,000- $250,000 USD
- Compensation Philosophy:
Benefits
- Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.
- Validate coverage, measure signal quality, tune false positives, and continuously test whether defenses work.
- Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations.
Company info
- At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale.
- With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we're at a stage where we're continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world.
- Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater.
- At LangChain, our mission is to make intelligent agents ubiquitous.
- We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on.
- We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale.
- With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we're at a stage where we're continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together.
- LangChain is a place where your contributions can shape how this technology shows up in the real world.
- Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement.
- We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater.
- The Security team ensures that while AI moves at breakneck speed, everyone driving the racecar is wearing a seatbelt.
- We secure LangChain's core platform and protect AI agents from emerging threats.
- We work across the stack so developers can confidently ship from prototype to production without compromising on safety or privacy.
- 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response - and the software skills to build your way out of repetitive work.
- Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts.
This listing is sourced directly from LangChain's careers page and normalized into a canonical job model.