Braintrust is the agent observability platform. By actively applying intelligence to agent traces and automatically surfacing the most critical patterns, Braintrust gives teams the visibility to understand how agents behave in production and the tools to improve them.
Teams at Notion, Stripe, Box, OpenAI, and Cloudflare use Braintrust to trace their agents, find the issues in their observability data, and run evals that tell them how to improve.
We’re looking for a Detection and Response engineer to design and build systems that identify, analyze, and eradicate threats across the Braintrust stack. You’ll practice detection-as-code, run security operations with agents, lead incident response, and stay ahead of the curve incorporating real-time threat intelligence. Have a big impact with a small team that has outsized capabilities.
What you'll doBuild security telemetry pipelines across cloud execution environments (ECS/K8s), CI/CD systems, identity systems, endpoints, and agentic workloads
Continuously improve detections for attacks, abuse, and anomalous behavior
Own the alert pipeline end-to-end and keep signal-to-noise high
Lead incident response and participate in on-call: triage, scope, contain, and remediate incidents, then write postmortems that produce durable improvements
Hunt proactively for threats and build the tooling for turning evidence into new detections
Build agents that triage alerts, enrich findings, gather evidence, and scope incidents, with human-in-the-loop controls and evals that keep the automation trustworthy
Run vulnerability response, evaluating impact and driving remediation across our infrastructure
Proficient in modern backend technologies and comfortable writing real code in Python, TypeScript, or Go
AWS experience (IAM, VPC, KMS, GuardDuty, CloudTrail) and working fluency in at least one of Azure or GCP
Kubernetes detection experience: audit logs, runtime telemetry, and workload identity
Knowledge of endpoint security (MacOS) and detection and response techniques
Hands-on incident experience: you’ve been on call, led incidents, and written postmortems
Strong written and verbal communication
A clear point of view on AI/LLM security and hands-on experience defending relevant threats
Bonus: prior experience with LLM red-teaming, agent sandbox research, or other AI-relevant security threat defense
Medical, dental, and vision insurance
Daily lunch, snacks, and beverages
Flexible time off
Competitive salary and equity
Wifi & cellphone stipend
Braintrust is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
Skills Required
- Proficiency in modern backend technologies and ability to write production code in Python, TypeScript, or Go
- AWS experience with IAM, VPC, KMS, GuardDuty, and CloudTrail
- Working fluency in at least one of Azure or GCP
- Kubernetes detection experience involving audit logs, runtime telemetry, and workload identity
- Knowledge of endpoint security for MacOS and detection and response techniques
- Hands-on incident response experience, including on-call participation, incident leadership, and postmortem writing
- Strong written and verbal communication skills
- Clear perspective on AI/LLM security and hands-on experience defending relevant threats
- Experience with LLM red-teaming, agent sandbox research, or other AI-relevant security threat defense
What We Do
Braintrust is the first decentralized Web3 talent network that connects skilled, vetted knowledge workers with the world’s leading companies. The community that relies on Braintrust to find work are the same people who own and build it, ensuring the network always serves the needs of its users, instead of a centrally-controlled corporation. And because the community of knowledge workers and contributors earns ownership and control of Braintrust through its native BTRST token for their contributions to the network and its growth, new Talent and jobs have participated in the network at record speeds. Braintrust has over 700,000+ community members, with knowledge workers and project contributors across the world. Braintrust is trusted by hundreds of Fortune 1000 global enterprises including Nestlé, Porsche, Atlassian, Goldman Sachs, and Nike. For more information, visit: www.braintrust.com. BTRST is available on Coinbase.com and in the Coinbase Android and iOS apps. Coinbase customers can trade, send, receive, or store BTRST in most Coinbase-supported regions. For more information on Braintrust and the BTRST token, read the “Braintrust: The Decentralized Talent Network” whitepaper.
