AI-Native Detection and Triage Engineer

Signal from the fleet. We run eBPF sensors across the hosts, feeding a SIEM. You will own what the sensors watch, their lifecycle across our kernel versions, and their path into the pipeline. You will own detection coverage for the scenarios that matter most on a platform like ours: spotting a compromised host and the lateral movement that follows, noticing control-plane access patterns, operator access to customer machines, secrets access, and abuse of AI workloads and the credentials inside them.

Signal from the code. Agents already review every merged PR for security issues; you will own them, their prompts, which repositories they watch, and so forth.