Staff Detection & Response Engineer

Typeface
Palo Alto, CA
Hybrid

Who this role is best for

Aimed at experienced security professionals who lead incident response and build automated systems, with a focus on cloud security and collaboration across engineering and enterprise teams.

Best fit for

  • Experienced incident response leaders with a background in cloud security and automation
    — “Lead the end-to-end response to security incidents – from detection and triage to containment, eradication, recovery, and post-incident review”
  • Candidates with a history of shaping security culture and mentoring teams
    — “Mentor and support teammates, helping to shape a strong, blameless, security-first culture”
  • Individuals with hands-on experience in digital forensics and threat hunting
    — “Perform log analysis, digital forensics, and threat hunting to uncover root causes and emerging risks”

Things to consider

  • Hybrid work requires in-office presence three days a week in Palo Alto, CA
    — “This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.”
  • The role demands ownership of the incident lifecycle and high levels of autonomy
    — “You’ll own the end-to-end incident lifecycle — from first alert to root cause and lasting fix”

How to stand out

  • Highlight experience with SIEM, EDR, and SOAR tools in your resume and interview responses
    — “Hands-on experience with cloud security in AWS, Azure, or GCP, and with SIEM, EDR, and SOAR tools”
  • Emphasize your ability to build and maintain incident response playbooks and runbooks
    — “Build and maintain incident response playbooks, runbooks, and escalation paths that keep teams aligned under pressure”
  • Showcase your skills in scripting for automation in investigation and response tasks
    — “Scripting skills (Python, PowerShell, or Bash) to automate investigation and response tasks”
Pace · Fast PacedCollaboration · HighAutonomy · HighDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • leads end-to-end incident response
  • investigates alerts
  • builds incident response playbooks
  • automates detection and response workflows
  • coordinates response
Typical background
incident responsesecurity operations

Skills & requirements

Required

Incident ResponseSecurity OperationsDigital ForensicsAutomationCloud SecuritySIEMEDRSOARLog AnalysisThreat HuntingCommunication

Preferred

AI SecurityGenerative AI Security

Stack & domain

Security Incident ResponseCloud SecuritySIEMEDRSOARMitre Att&ckNIST Incident HandlingScriptingLog AnalysisDigital ForensicsThreat HuntingAutomationB2BEnterprise SaasAIGenerative AISecurity OperationsCommunicationTeamworkLeadershipProblem-solvingAdaptabilityCustomer FocusStrategic ThinkingPresentation SkillsNetworkingProject ManagementProgram ManagementTechnical BridgeKnowledge TransferGCIHGCFAGCIACissp

About the role

Original posting from Typeface via Greenhouse

About Typeface

We help the world’s biggest brands move from brief to fully personalized campaigns — in days, not months. 

Founded by Abhay Parasnis and backed by Microsoft, GV, Salesforce, Lightspeed, Madrona and Menlo, we’re building category-defining technology at the intersection of creativity and AI with real impact. Join us to help shape the future of enterprise marketing. 

What You’ll Do

We’re looking for a Staff Detection & Response Engineer to help lead how we detect, respond to, and recover from security incidents across our platform. You’ll own the end-to-end incident lifecycle — from first alert to root cause and lasting fix — so the enterprise marketers who rely on Typeface can trust that their brands, content, and data are protected.

This is your chance to shape how a fast-growing AI company keeps its platform secure — not just by responding to threats, but by building the systems, playbooks, and automation that make every response faster and smarter.

How You’ll Make an Impact:

Lead the end-to-end response to security incidents – from detection and triage to containment, eradication, recovery, and post-incident review

Investigate alerts and suspicious activity across cloud infrastructure, endpoints, identity systems, and SaaS applications

Build and maintain incident response playbooks, runbooks, and escalation paths that keep teams aligned under pressure

Perform log analysis, digital forensics, and threat hunting to uncover root causes and emerging risks

Automate detection and response workflows to reduce time-to-detect and time-to-resolve

Collaborate closely with Engineering, Product, IT, Legal and Customer teams to coordinate response and communicate clearly with stakeholders

Run tabletop exercises and drive continuous improvement of our security posture and readiness

Mentor and support teammates, helping to shape a strong, blameless, security-first culture

What You Bring:

10+ years of experience in incident response, security operations, or digital forensics, with a strong track record of leading investigations end to end

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience

Hands-on experience with cloud security in AWS, Azure, or GCP, and with SIEM, EDR, and SOAR tools

Strong understanding of attacker techniques and frameworks such as MITRE ATT&CK and NIST incident handling

Scripting skills (Python, PowerShell, or Bash) to automate investigation and response tasks

Excellent communication skills and the ability to stay calm, thrive independently and lead in collaborative teams

Experience supporting B2B or enterprise SaaS products

Bonus: Background securing AI or generative AI systems

Bonus: Industry certifications such as GCIH, GCFA, GCIA, or CISSP

Location

This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.

Base Salary

The range for this role is $210,000-$240,000 plus equity. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process.

Benefits

Competitive compensation — including salary, equity, and 401(k)

Full medical, dental, and vision insurance for you and your family

HSA and FSA options to support your financial wellness

Flexible time off — including parental leave

Well-being programs — resources to support your mental and physical health

Daily lunch & snacks

Mentorship & impact — work closely with top AI leaders on products that ship 

Equality Opportunity Statement

We welcome and encourage applicants from all backgrounds. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, medical condition, veteran status, or any other legally protected status. We comply with applicable laws in every jurisdiction where we operate.

Why You’ll Love Working Here 

Build something big — Be part of a fast-growing startup defining a new category: marketing orchestration powered by Agentic AI.

Your work will matter — Trusted by Fortune 100 companies, our platform delivers 10x content velocity and 90% faster campaigns.

A+ team — Collaborate with veterans from Meta, Amazon, Adobe, Google, Microsoft, and top AI companies.

Backed by the best — GV, Salesforce Ventures, Microsoft, Lightspeed, Madrona and Menlo ($165M raised).

Recognized for innovation — TIME Best Inventions, Fast Company Next Big Thing in Tech, Gartner Cool Vendor, Adweek AI Company of the Year, LinkedIn Top Startup, Webby Award (AI Work & Productivity). 

Source: Typeface careers (Greenhouse)

Similar roles