Security engineer, detection and response (UK)
About this role
The security team at Writer builds sophisticated detection systems that identify attacks targeting the company's AI platform, training data, and model deployments. Staff detection and response engineers protect the AI infrastructure that enables enterprises to orchestrate AI-powered work, creating automated response capabilities that scale with rapid company growth.
Daily responsibilities involve designing detection strategies for AI-specific threats, building automated response playbooks, leading incident response coordination, and proactively hunting for sophisticated attacks across GPU clusters and distributed training environments. Team members collaborate closely with AI security research, cloud infrastructure, software security engineering, and AI researchers to maintain a defense-in-depth strategy.
Ideal candidates bring a self-directed execution mindset, deep experience in security operations or detection engineering, and strong programming skills in languages like Python, KQL, or SPL. Professionals who thrive in this environment enjoy tackling novel security challenges that do not exist in textbooks yet, translating threat research into production detections, and safeguarding high-value enterprise AI systems.
What you will do
- Design and implement detection strategies that identify AI-specific threats across distributed infrastructure.
- Build automated response playbooks and orchestration workflows that contain threats without human intervention.
- Lead security incident response coordination across teams when AI infrastructure or models are compromised.
- Hunt proactively for sophisticated threats across GPU clusters and training infrastructure by analyzing model outputs.
- Build detection-as-code frameworks with version control and automated deployment.
- Collaborate cross-functionally as the operational security partner for all teams.
- Maintain a 24/7 on-call rotation for critical AI security incidents.
What you need
- Three to five plus years in security operations, detection engineering, or incident response with a proven track record of stopping sophisticated attacks.
- Three plus years specifically securing AI/ML infrastructure, high-performance computing environments, or distributed systems at scale.
- Strong programming skills in Python, KQL, SPL, or similar languages to build custom detection logic and automate response workflows.
- Experience with SIEM platforms, detection technologies, and forensic investigation techniques in complex distributed environments.
- Self-directed execution mindset with a track record of securing high-value intellectual property and identifying critical security gaps.
Benefits
- Generous PTO, plus company holidays
- Comprehensive medical and dental insurance
- Paid parental leave for all parents (16 weeks)
- Fertility and family planning support
- Early-detection cancer testing through Galleri
- Competitive pension scheme and company contribution
- Annual work-life stipends for wellness and learning development
- Company-wide off-sites and team off-sites
- Competitive compensation and company stock options
Skills and tech stack
Questions candidates ask
Where is the role located?
This role can be based in London, UK, reporting to the head of security operations.
What kind of systems will I be defending?
You will defend AI infrastructure, training data, model deployments, GPU clusters, and distributed training environments against adversaries.
Who will I be collaborating with?
You will work closely with the AI Security research team, Cloud Infrastructure, Software Security Engineering, and AI researchers.
What are the primary technical requirements for this position?
Candidates need programming skills in Python, KQL, SPL, or similar languages, alongside experience with SIEM platforms, detection technologies, and forensic investigation techniques.