HackerOne

HackerOne

Senior Security Engineer, Detection and Response

Austin · Senior · Contract

No sponsorshipDetected 92 days ago
PythonGoRubyAWSCloud PlatformsDockerKubernetesDatadogLLMsAgentic AICybersecurityIncident ResponseSensorsResearchLeadershipCollaborationProblem Solving

About the role

  • At HackerOne, we're rebuilding our Detection & Response function with an AI-first approach-focused on engineering, not just triage.
  • This role operates across the full detection lifecycle-from identifying gaps in observability to shipping high-signal detections and leading incident response when it matters most.
  • You'll help scale what a small team can accomplish by embedding automation, intelligence, and AI into how we detect and respond to threats.

Responsibilities

  • Build automated investigation and response workflows that replace manual runbooks, leveraging AI First principles to scale triage, enrichment, containment, and remediation
  • Develop and deploy AI/LLM-powered tooling to accelerate investigations, reduce alert fatigue, and extend team capacity beyond traditional headcount constraints, embedding AI First practices into daily workflows
  • Lead and participate in incident response, including detection, investigation, containment, and retrospectives, applying First Principles Problem Solving to identify root causes and improve long-term resilience
  • Partner cross-functionally with engineering and platform teams to expand logging, improve observability, and embed detection capabilities into the development lifecycle
  • Continuously improve detection quality by analyzing alert performance, tuning for signal, and building feedback loops between incidents and detections using Data-Driven Decision Making
  • Adapt quickly to evolving threats, tools, and priorities, helping the team maintain momentum and effectiveness through Change Agility
  • Offensive security is no longer optional - it is the standard for forward-thinking companies that want to build trust and resilience in a world where AI-driven innovation and adversaries are moving faster than ever.
  • We're committed to building a global team!

Requirements

  • 5+ years of experience in detection and response, security engineering, or software engineering with a security focus
  • Strong software engineering fundamentals with proficiency in Python, Go, Ruby, or similar languages, and experience working in production codebases
  • Experience with log aggregation and analysis platforms (e.g., Datadog, Splunk, ELK) and endpoint detection tools (e.g., SentinelOne, CrowdStrike)

Nice to have

  • Experience with detection-as-code frameworks or building custom detection pipelines
  • Familiarity with containerized environments (Docker, Kubernetes, ECS/EKS)
  • Experience with threat intelligence, threat hunting, forensics, or attacker tradecraft frameworks such as MITRE ATT&CK
  • Employee Assistance Program
  • Eligibility may differ by country
  • Visa/work permit sponsorship is not available.
  • Employment at HackerOne is contingent on a background check.
  • HackerOne makes hiring decisions based solely on qualifications, merit, and business needs at the time.

Skills

  • HackerOne is a global leader in Continuous Threat Exposure Management (CTEM).

Compensation

  • This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship.

Benefits

  • Health (medical, vision, dental), life, and disability insurance*
  • Equity stock options
  • Retirement plans
  • Paid public holidays and unlimited PTO
  • Paid maternity and parental leave
  • Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act)
  • This policy applies to all HackerOne employment practices, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship.
  • Design, build, and maintain detection-as-code capabilities across cloud infrastructure, SaaS applications, endpoints, and identity systems, improving coverage and signal quality through Data-Driven Decision Making
  • Proactively identify gaps in visibility or coverage and translate ambiguous problem spaces into concrete detection and response solutions through First Principles Problem Solving

Company info

  • we combine the ingenuity of the largest security research community with a best-in-class AI-powered platform, trusted by the world's top organizations.
  • HackerOne Values
  • HackerOne is dedicated to fostering a strong and inclusive culture.
  • HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions.
  • We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability.
  • Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability.
  • HackerOne is at a pivotal inflection point in the security industry.

Visa & Work Authorization

  • Visa/work permit sponsorship is not available.

This listing is sourced directly from HackerOne's careers page and normalized into a canonical job model.