Senior Detection & Response Engineer, Cyber Defense

<h2>About Nscale</h2> <p>Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.</p> <p>We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.</p> <p> </p> <h2>About the Role</h2> <p>We are hiring Detection & Response Engineers to decide what we detect, command the response when something is real, and automate everything in between, across enterprise, cloud, production, data centre, and operational technology environments.</p> <p>You will work in a three-person regional rotation. Roughly one week in three, you hold the operational slot: taking escalations, deciding fast, and acting. The other two weeks are engineering. You find where our detection coverage is thin and work with our AI agents to close it, build automation that removes human time from the response path, and make sure we are ready for the next incident. When a serious incident lands, you command it.</p> <p>If you have spent years closing the same ticket every Tuesday—and knowing exactly how to fix it for good, but never having the mandate—this is the job where that is the mandate.</p> <p> </p> <h2>What you'll be doing</h2> <h3><strong>Detection engineering</strong></h3> <ul> <li>Map our detection coverage against attacker tradecraft and the real estate, and find where we are blind.</li> <li>Turn coverage gaps, incidents, threat research, and recurring escalations into clear detection ideas, and work with our AI agents to build them.</li> <li>Assess and tune the detection ideas and rule logic our agents propose, which run as shadow rules before they go live. Judge what each one catches, what it misses, and what its noise will cost.</li> <li>Make the human call on promotion. You will rarely write a query from scratch, but nothing goes live without your judgement, and you are accountable for whether it is right.</li> <li>Retire or retune live detections that are noisy, stale, or no longer relevant.</li> <li>Identify telemetry gaps and make the business case for closing them.</li> </ul> <h3><strong>Automation</strong></h3> <ul> <li>Remove recurring toil from the response path: enrichment, triage, containment actions, case handling, and reporting.</li> <li>Improve the agents that hold the first tier, so they resolve more on their own and escalate with better context. Every gain here cuts the human time per alert and lets us cover more attack surface.</li> <li>Ship new capabilities in our internal security platform, such as response actions, integrations, and agent tooling, so every engineer and agent on the team gets faster, and prove each one works in production.