Connectionism: Research Blog by Thinking Machines Lab. Backed by a16z, Accel and GV.
About the role
We’re looking for a detection and response engineer to build how we find, investigate, and stop threats against our company, platforms, models, and data. You’ll own the pipelines that turn raw telemetry into high-fidelity detections, lead the response when real incidents happen, and run a threat intelligence practice that keeps our defenses focused on the adversaries who actually target frontier AI labs. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Bachelor’s degree or equivalent experience in computer science, engineering, or similar
- Proficiency in Python or Rust for building data pipelines, detections, and internal tools
- A track record responding to real security incidents in production environments, including leading investigations and coordinating across teams under pressure
- Hands-on experience building and operating security data pipelines at scale: log ingestion, parsing and normalization, enrichment, and storage and query in a SIEM or data lake (e.g., Splunk, Elastic, Panther, BigQuery, Snowflake, or ClickHouse)
- Experience producing and consuming threat intelligence: tracking adversary TTPs, mapping them to frameworks like MITRE ATT&CK, and translating intel into detections and hunts
- Strong understanding of cloud, AWS, GCP, or Azure, Kubernetes, and identity provider telemetry, and how attackers move through these environments
More about this role
The mission of Thinking Machines is to build AI that extends human will and judgment. We are training frontier models with Inkling, developing Tinker to let people make models their own, and crafting interfaces that broaden human-AI communication. We believe the future worth building is human, and we're hiring people who want to build it.
We’re looking for a detection and response engineer to build how we find, investigate, and stop threats against our company, platforms, models, and data. You’ll own the pipelines that turn raw telemetry into high-fidelity detections, lead the response when real incidents happen, and run a threat intelligence practice that keeps our defenses focused on the adversaries who actually target frontier AI labs. You’ll partner closely with security, infrastructure, research, and product teams so that detection and response scale with the company instead of slowing it down.
Lead incident response end-to-end: triage, scoping, containment, eradication, recovery, and blameless postmortems that turn lessons into new detections and controls.
Design, build, and operate the security data pipelines and tooling that power detection and response: collecting,...
Browse similar: AI jobs · AI startup jobs · Startup jobs · San Francisco Bay Area