2 months ago
Base Salary
$180k - $240k/yr
Responsibilities
- Own the detection lifecycle by translating threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code.
- Design and operate security telemetry pipelines across GCP/AWS, Kubernetes, and the LangSmith/LangGraph control plane.
- Build investigation and threat-hunting tools for proactive hunting, evidence collection, incident scoping, and containment.
- Develop internal AI agents and automation for alert triage, finding enrichment, evidence gathering, and routine security operations with human-in-the-loop controls.
- Lead security incident response, participate in the incident on-call rotation, and drive postmortems and remediation.
- Partner with Product Security to convert threat models and vulnerability findings into production monitoring and secure-design improvements.
Requirements
- 5+ years of security engineering experience with meaningful detection engineering, security operations, or incident response experience.
- Strong production software engineering skills in Python or Go; TypeScript experience is a plus.
- Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and actionable detection development.
- Ability to model attacker behavior, perform threat hunting, test detection coverage, and distinguish useful signals from noise.
- Hands-on incident response experience, including on-call participation, incident leadership, and postmortems.
- Experience building reliable automation or developer-facing systems with APIs, workflows, instrumentation, quality evaluation, and production operation.
- Ability to identify users and requirements, prioritize high-leverage problems, define success, and ship iteratively.
- Experience building or operating AI agents for security workflows is preferred.
- Experience using AI tooling for security investigations and engineering, understanding AI threats and adversarial testing, or securing LLM and agent workloads is preferred.
- Exposure to SOC 2 or ISO 27001 monitoring and evidence automation is preferred.
- Experience with infrastructure as code such as Terraform or Helm is preferred.
- Experience securing SaaS and self-hosted or air-gapped deployments is preferred.
Benefits
- Medical, dental, and vision coverage.
- Flexible vacation.
- 401(k) plan.
- Meals on in-office days in the US.
- Role is located in San Francisco or NYC and includes participation in an incident on-call rotation.
Categories
About LangChain
LangChain builds open-source frameworks and a commercial platform for developing, evaluating, deploying, and operating LLM-powered agents and applications. Its LangSmith suite provides observability, testing, deployment, and governance for enterprise AI workloads; customers include Nvidia, LinkedIn, Workday, and Bridgewater. Privately held and headquartered in San Francisco, the company was founded in 2022.