Security Engineer – Detection & Response Lead

About the role

As the Detection and Response Lead at Serval, you will design and scale the company’s cybersecurity detection and response operations, ensuring robust monitoring, incident handling, and continuous improvement across our platform and customer environments.

Key responsibilities

• Design, implement, and operate detection and response processes, including monitoring, triage, investigation, containment, and remediation of security events.
• Build and mentor a team covering observability, detection, response, and threat intelligence, hiring and scaling as the platform grows.
• Develop incident playbooks, on‑call rotations, escalation paths, and conduct tabletop exercises to maintain operational readiness.
• Collaborate with engineering to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments.

Required profile

• 10+ years of experience in cybersecurity with deep expertise in detection engineering, incident response, and security operations.
• Proven leadership in building and scaling detection, observability, and threat intelligence teams.
• Excellent communication skills, calm under pressure, and ability to coordinate multi‑disciplinary incident response.

Required skills

• Experience with modern observability stacks such as SIEM, data lakes, EDR, cloud telemetry, and logging.
• Strong understanding of adversary tactics, techniques, and procedures (TTPs) and translating them into detection strategies.

What we offer

• Impactful role shaping the security posture of an AI‑native automation platform.
• Opportunity to build a new AI product offering with support from experienced investors and leadership.
• Culture that values innovation, ownership, accountability, and fun.