Modal
Detection and Response Engineer
About this role
Modal is seeking a Detection and Response Engineer to build threat identification and incident response systems for their AI infrastructure platform. You'll design high-fidelity detections, lead investigations across cloud and container environments, and create automation and tooling that leverage AI to improve security operations at scale.
What you'll do
- Design and build detections for attacks, abuse, and anomalous behavior across infrastructure and production systems
- Lead security investigations spanning production infrastructure, cloud environments, and internal systems
- Build playbooks and automation to reduce investigation time and improve response consistency
- Develop internal security tooling and leverage LLMs to automate analysis and surface actionable insights
- Improve collection and quality of security telemetry across the platform
- Partner with engineering teams to ensure new systems are observable and secure by default
What they're looking for
- Detection engineering and incident response
- Production system design and software engineering
- Cloud infrastructure and Kubernetes
- SQL for security event investigation and detection development
- Linux and networking fundamentals
- Log analysis and behavioral signal detection
- LLM and AI application to security workflows
- Incident investigation and post-mortem analysis
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Modal
Modal builds a cloud platform for running large-scale AI workloads and infrastructure, enabling companies to deploy and optimize production machine learning systems. The company is hiring Forward Deployed Engineers to work directly with AI customers, Infrastructure Security Engineers to strengthen platform security, and Developer Relations Engineers to engage the developer community with technical content and best practices.
- Website
- modal.com
Likely interview questions
- Walk us through a security incident you investigated—what was your approach, and what did you build to prevent similar issues?
- How have you approached building detections with high signal-to-noise ratios, and what metrics did you use to measure effectiveness?