Detection & Response Technical Lead

• As Tech Lead for Detection & Response, you will be the senior technical owner of how Hadrian detects, investigates, and responds to threats across our corporate, cloud, and factory environments. This is a hands-on senior IC role leading a small team: you will set the technical direction, build the next-generation AI-native detection stack, and lead from the keyboard
• Own detection & response end to end — strategy, architecture, and hands-on engineering — across corporate, cloud, and factory environments
• Design and build an AI-native D&R stack: detection-as-code, LLM-assisted triage and enrichment, and agentic response automation
• Lead incident response from triage through containment, remediation, and postmortem, including high-severity scenarios
• Set technical direction for a small detection & response team; mentor engineers and raise the bar on detections, playbooks, and tooling
• Partner with IT, infrastructure, and compliance teams to meet ITAR and CMMC detection, monitoring, and response requirements

Benefits

• Relocation stipend if you’re moving from outside of LA
• 100% coverage of platinum medical, dental, vision, and life insurance plans for employees
  401k
• Flexible vacation policy- 8+ years of security engineering experience with deep, hands-on detection & response expertise (SIEM, EDR, cloud and identity telemetry, SOAR)
• Strong software engineering skills with detection-as-code and infrastructure-as-code fluency
• A track record of setting technical direction as a tech lead, team lead, or anchor senior IC
• Experience leading incident response end to end in production environments
• Demonstrated application of AI/LLM tooling to security workflows — and sound judgment about its limits
• Red team, penetration testing, or adversary emulation experience at any point in your career
• Experience in ITAR, CMMC, or other regulated defense or government environments
• Exposure to OT/ICS or manufacturing environment security
• Production experience building agentic or LLM-based security automation
• 0→1 experience building a security capability at a fast-scaling startup