Security Engineer, Detection and Response

About the Company

Serval is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end, replacing manual processes with adaptive, learning software. Backed by leading investors including Sequoia Capital and Redpoint Ventures, we are building the universal AI operations layer.

Responsibilities

• Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, and remediation.
• Build, lead, and mentor a team spanning observability, detection and response, and threat intelligence.
• Ensure operational rigor through incident playbooks, on-call paths, and tabletop exercises.
• Improve detection quality by partnering with engineering teams to ensure reliable telemetry across cloud and production environments.
• Partner with Engineering and Product to embed detection and response into systems by design.
• Use Serval's own agents to solve frontier security and security-operations problems.

Requirements

• 10+ years in cybersecurity with expertise in detection engineering, incident response, and security operations.
• Deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams.
• Proven leadership skills with a history of driving continuous improvements to programs and people.
• Exceptional written and verbal communication skills with the ability to lead incidents under pressure.
• Deep expertise in modern observability stacks including SIEM, data lakes, EDR, cloud telemetry, and logging.
• Strong understanding of modern adversary tradecraft (TTPs) and practical detection strategies.
• Mission-oriented mindset with a passion for complex, fast-paced environments.