Find work in the United States.

A simpler way to find your next job.

Jobs in the United States

25+ jobs

Save this search

Added 3 hours ago
Senior Solutions Engineer
DomainTools
Remote, United States
Design and defend integration architectures with SIEM, SOAR, TIP, XDR, and data platforms (Splunk, CrowdStrike, Google SecOps, Palo Alto Cortex, Anomali, Elastic, Microsoft Sentinel,…
Added 15 hours ago
Cybersecurity Data Engineer
SPECIAL AEROSPACE SECURITY SERVICES INC
Fort Meade, MD
Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem (Elasticsearch, Logstash, Kibana, Fleet) to enable high-volume, high-availability operations.
Added 15 hours ago
Consulting Architect - Search
Elastic
United States
Deployment Experience: Proven track record of deploying Elastic Search, Observability (APM, logs, metrics) and Elastic Security (SIEM, endpoint) or similar enterprise-scale solutions.
Added 2 days ago
Security Engineer
Mixpanel
San Francisco, CA
Experience working in a SIEM (e.g. Splunk, Google SecOps/Chronicle, Panther, Elastic), including writing queries and building or tuning detections
Added 2 days ago
Subject Matter Expert I
ARSIEM
Arlington, VA
ARSIEM is looking for a Senior Detection Engineer. The Senior Detection Engineer develops, validates, deploys, and tunes detection logic supporting proactive threat hunting across federal…
Added 2 days ago
2027 Associate Embedded Software Engineer - Roy UT
Northrop Grumman
Roy, UT
Participate in security incident response drills and log analysis using SIEM tools (e.g., Splunk, Elastic).
Added 3 days ago
Security Engineer
BOOZ, ALLEN & HAMILTON, INC.
Annapolis Junction, MD
6+ years of experience administering Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, or Fleet
Added 3 days ago
Cybersecurity Engineer
Zaden Technologies, Inc.
Huntsville, AL
Experience with SIEM platforms such as Splunk or Elastic
Added 3 days ago
2027 Associate Cyber Systems Engineer - Roy UT
Northrop Grumman
Roy
Participate in security incident response drills and log analysis using SIEM tools (e.g., Splunk, Elastic).
Added 3 days ago
AP
Cyber Security Project Engineer
Ardent Principles, Inc.
Chantilly, VA
- $130,000 to $260,000 USD / year
Security information and event management (SIEM) systems (e.g., Splunk, QRadar, Elastic Stack)
Added 3 days ago
DS
Cybersecurity Data Engineer - TOP SECRET REQUIRED
DirectViz Solutions, LLC
Adelphi, MD
- $150,000 to $155,000 USD / year
DirectViz Solutions (DVS) is seeking a Cybersecurity Data Engineer to support cybersecurity operations in Adelphi, MD. This position will focus on designing, maintaining, and optimizing…
Added 3 days ago
2027 Associate Cyber Systems Engineer - Roy UT
CORP-Corporate Office
United States
Participate in security incident response drills and log analysis using SIEM tools (e.g., Splunk, Elastic).
Added 3 days ago
I
Senior Cloud Security Engineer
Iterable
Remote, United States
- $141,000 to $194,000 USD / year
…(IAM), Service Control Policies (SCPs), Virtual Private Clouds, Elastic Load Balancers, AWS CloudTrail, and Security…
Added 4 days ago
T
Elasticsearch Engineer *No C2C*
TEKsystems
Lincoln, MA
- $120,000 to $250,000 USD / year
5+ years of experience administering Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, or Fleet
Added 4 days ago
Solutions Engineer, Splunk
Cisco Systems, Inc.
Remote, United States
Experience with platforms such as Elastic, Datadog, Dynatrace, Microsoft Sentinel, CrowdStrike Next-Gen SIEM, or similar
Added 4 days ago
Cyber Security Engineer
Seneca Holdings
Orlando, FL
Seneca Technologies is seeking a Cyber Security Engineer I to support Security Operations Center (SOC) operations in Orlando, FL. In this role, you will play a key part in monitoring,…
Added 5 days ago
Senior Elastic Stack Data Integration Engineer IRES - SSFB/HSV
Amentum
Redstone Arsenal, AL
The Senior Elastic Stack Data Integration Engineer will serve as the primary technical authority for designing, building, and maintaining data ingestion pipelines supporting Elastic SIEM.…
Added 5 days ago
Cyber Systems Security Engineering Stf - E4
Lockheed Martin
King of Prussia, PA · King of Prussia
Familiarity with SIEM Tools deployment and administration specifically Elastic
Added 5 days ago
Cyber Systems Security Engineering Sr - E3
Lockheed Martin
King of Prussia, PA · King of Prussia
Familiarity with SIEM Tools deployment and administration specifically Elastic
Added 5 days ago
Consulting Architect
Elastic
United States
Guide customers in SIEM, endpoint, and cloud security use cases using Elastic Agents, Beats, Logstash, and related technologies.
Added 5 days ago
Senior Cloud Security Engineer
Peraton
Remote, United States
Proficiency writing queries and analyzing logs in a SIEM or log platform (Splunk, Microsoft Sentinel, Elastic, or equivalent)
Added 5 days ago
Senior Security Engineer - Cloud
Muon Space
San Jose, CA
Experience with SIEM platforms (Splunk, Sentinel, Elastic, or similar) for log analysis and detection engineering
Added 5 days ago
Senior Security Engineer - Aerospace
Muon Space
San Jose, CA
Experience with SIEM platforms (Splunk, Sentinel, Elastic, or similar) for log analysis and detection engineering
Added 5 days ago
Information System Security Engineer (ISSE)
Castelion Corporation
Torrance, CA · Torance, CA
The Information System Security Engineer (ISSE) at Castelion is responsible for translating security requirements into tested controls for classified information systems. In this role, you…
Added 5 days ago
Senior Security Engineer - General
Muon Space
San Jose, CA
Experience with SIEM platforms (Splunk, Sentinel, Elastic, or similar) for log analysis and detection engineering

Thinking Machines Lab

Security Engineer, Detection & Response

San Francisco, CA, United States

$300,000 to $350,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $300,000 to $350,000 USD / year
Posting language: English
Posted: Oct 27, 2026

Original job description

ABOUT THINKING MACHINES

The mission of Thinking Machines is to build AI that extends human will and judgment. We are training frontier models with Inkling, developing Tinker to let people make models their own, and crafting interfaces that broaden human-AI communication. We believe the future worth building is human, and we're hiring people who want to build it.

ABOUT THE ROLE

We’re looking for a detection and response engineer to build how we find, investigate, and stop threats against our company, platforms, models, and data. You’ll own the pipelines that turn raw telemetry into high-fidelity detections, lead the response when real incidents happen, and run a threat intelligence practice that keeps our defenses focused on the adversaries who actually target frontier AI labs. You’ll partner closely with security, infrastructure, research, and product teams so that detection and response scale with the company instead of slowing it down.

WHAT YOU’LL DO

Lead incident response end-to-end: triage, scoping, containment, eradication, recovery, and blameless postmortems that turn lessons into new detections and controls.
Design, build, and operate the security data pipelines and tooling that power detection and response: collecting, normalizing, enriching, and storing telemetry from cloud, Kubernetes, identity, endpoint, SaaS, and application sources.
Author, deploy, and maintain high-fidelity detections across SIEM, endpoint, cloud, and security tooling
Build and run our threat intelligence practice: track actors and campaigns relevant to AI labs such as espionage, model weight theft, supply chain compromise, and credential abuse. Turn that intel into hunts, detections, and hardening recommendations.
Proactively hunt for threats across our environment, and build automation and response tooling: enrichment, playbooks, automated containment that shortens time to detect and respond.
Collaborate with researchers and product teams to detect AI-specific threats in production. Develop and exercise incident response plans, on-call processes, and tabletop exercises with engineering, research, legal, and leadership.
Participate in an on-call pager rotation for security incidents.

SKILLS AND QUALIFICATIONS

MINIMUM QUALIFICATIONS

Bachelor’s degree or equivalent experience in computer science, engineering, or similar.
Proficiency in Python or Rust for building data pipelines, detections, and internal tools.
A track record responding to real security incidents in production environments, including leading investigations and coordinating across teams under pressure.
Hands-on experience building and operating security data pipelines at scale: log ingestion, parsing and normalization, enrichment, and storage and query in a SIEM or data lake (e.g., Splunk, Elastic, Panther, BigQuery, Snowflake, or ClickHouse).
Experience producing and consuming threat intelligence: tracking adversary TTPs, mapping them to frameworks like MITRE ATT&CK, and translating intel into detections and hunts.
Strong understanding of cloud, AWS, GCP, or Azure, Kubernetes, and identity provider telemetry, and how attackers move through these environments.
Familiarity with host and network forensics, including endpoint telemetry, memory and disk analysis, and network logs.
Comfort operating across the stack and owning projects end-to-end.
Clear communication: incident reports, intel briefs, and postmortems for both technical and non-technical audiences.

PREFERRED QUALIFICATIONS

Detection and response experience at an AI lab, cloud provider, or other high-threat environment targeted by sophisticated actors.
Experience detecting AI-specific abuse, such as prompt injection, model extraction, or anomalous API usage.
Familiarity with ML infrastructure telemetry: GPU clusters, training jobs, and model artifact storage.
Experience with stream processing (e.g., Kafka, Flink, Vector) and cost-aware log management at high volume.
Malware analysis or reverse engineering experience.
Talks, blogs, open-source detection content, or published threat research.

LOGISTICS

Location: This role is based in San Francisco, California.
Compensation: Depending on background, skills and experience, the expected annual salary range for this position is $300,000-$350,000 USD.
Visa sponsorship: We sponsor visas. While we can't guarantee success for every candidate or role, if you're the right fit, we're committed to working through the visa process together.
Benefits: Thinking Machines offers generous health, dental, and vision benefits, unlimited PTO, paid parental leave, and relocation support as needed.

Apply About employer

More about this job

Skills

Research
Incident response
Kubernetes
Supply chain management
Leadership
Computer science
Python
Rust
Splunk
BigQuery
Snowflake
MITRE ATT&CK
AWS
Google Cloud
Microsoft Azure
Communication skills
ML
Apache Kafka
Reverse engineering
Logistics

Report this job

Jobs in the United States

Senior Solutions Engineer

Cybersecurity Data Engineer

Consulting Architect - Search

Security Engineer

Subject Matter Expert I

2027 Associate Embedded Software Engineer - Roy UT

Security Engineer

Cybersecurity Engineer

2027 Associate Cyber Systems Engineer - Roy UT

Cyber Security Project Engineer

Cybersecurity Data Engineer - TOP SECRET REQUIRED

2027 Associate Cyber Systems Engineer - Roy UT

Senior Cloud Security Engineer

Elasticsearch Engineer No C2C

Solutions Engineer, Splunk

Cyber Security Engineer

Senior Elastic Stack Data Integration Engineer IRES - SSFB/HSV

Cyber Systems Security Engineering Stf - E4

Cyber Systems Security Engineering Sr - E3

Consulting Architect

Senior Cloud Security Engineer

Senior Security Engineer - Cloud

Senior Security Engineer - Aerospace

Information System Security Engineer (ISSE)

Senior Security Engineer - General

Contact us