Detections.ai is building the platform for teams to create, test, organize, share, and improve detections.
We’re hiring a full-stack/product engineer with hands-on detection experience—writing or tuning detections, building SOC tooling, or integrating SIEM/EDR platforms.
You’ll own product features end to end across React interfaces, backend services, APIs, data models, search, integrations, and asynchronous workflows.
LLMs are a core product capability, not a bolt-on chatbot. Our assistant orchestrates domain tools and agents to analyze threat intelligence, search detection libraries, identify coverage gaps, create and translate detections, and ground recommendations in connected SIEM telemetry. We care about accuracy, evals, observability, hostile-input safety, and practitioner UX.
Stack: TypeScript, React, Next.js, NestJS, Python, AWS, OpenSearch, and Valkey/Redis.
Expected annual base salary: US$150,000–$225,000, or the Canadian-dollar equivalent, plus equity. The exact offer will depend on experience and role scope.
We’re looking for strong production web-app experience, end-to-end product ownership, and familiarity with some combination of Sigma, KQL, SPL, YARA, SIEM, EDR, or MITRE ATT&CK. We’re a small, experienced, remote team working directly with customers and security practitioners.