Senior AI Detection Engineer

About the Position

We’re hiring a Senior AI Detection Engineer to join TandemTrace. You will build high-confidence detections and the evaluation systems that keep them useful.

Responsibilities

• Design and implement detections across endpoint, identity, cloud, network, email, and application telemetry.
• Develop detection-as-code workflows for versioning, testing, review, deployment, observability, and continuous improvement.
• Use AI in the engineering loop to accelerate research, query generation, translation, testing, explanation, and tuning while enforcing evidence-based validation.
• Build evaluation datasets and test harnesses that measure coverage, precision, robustness, drift, and false-positive behavior.
• Research attacker techniques and translate them into detection opportunities, telemetry requirements, hunt logic, and investigation context.
• Partner with product and engineering to make high-quality detection knowledge available to autonomous investigations and customer environments.

Requirements

• Substantial hands-on detection-engineering experience in enterprise security operations, security products, or both.
• A strong record of shipping and improving detections using real production telemetry and measurable operational feedback.
• Deep understanding of attacker behavior and the telemetry required to observe it across multiple layers of the environment.
• Strong coding and automation ability, especially with Python and modern software-development practices.
• Practical experience applying AI or machine learning to security data, detection workflows, investigations, or engineering productivity.
• Healthy skepticism and clear writing. You expose assumptions, document tradeoffs, and make technical decisions inspectable.

We Offer

• Opportunity to help define how AI improves detection itself.
• Work directly with an experienced cybersecurity founder and a compact product team.
• Influence the product’s detection knowledge, evaluation standards, threat-hunting capabilities, and technical credibility with serious security teams.

About the Company

TandemTrace is building the autonomous layer for the modern SOC. Our agents investigate alerts, correlate evidence, hunt for threats, and help security teams understand what happened across the tools they already use.

Apply

Interested? Show us what makes a detection trustworthy. Send your LinkedIn profile or CV and a short note about a detection system, rule set, evaluation method, or engineering workflow you built or materially improved.

Apply by email ↗