Staff Security Engineer, Detection Platform

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

We’re hiring a Staff Security Engineer, Detection Platform to design and scale Nscale’s detection and response capabilities.

In this high-impact engineering role, you will build the systems and logic that power how we detect and respond to threats across infrastructure, endpoints, cloud, and enterprise environments. The role sits at the intersection of security engineering, security operations, and incident response, with close collaboration across teams to improve alert usability, investigation workflows, and overall operational effectiveness.

You’ll play a strategic role in strengthening Nscale’s security posture by building scalable, reliable detection systems, improving signal quality, and automating response. This work is central to helping the organization detect threats faster, reduce manual effort, and continuously improve coverage and fidelity as our environment evolves.

This role will be part of the global CISO organization.

What you'll be doing

Detection Engineering

• Design detection logic and alerting across infrastructure, cloud, endpoint, and SaaS environments.
• Develop and maintain high-fidelity detection rules based on threat intelligence and known attack patterns.
• Tune detection systems continuously to improve coverage and reduce false positives.
• Build tooling and infrastructure to support threat hunting and proactive detection.

Platform & Pipeline Development

• Build and scale SIEM pipelines for log ingestion, normalization, enrichment, and correlation.
• Work with log data at scale to improve the reliability and usability of detection systems.
• Support scalable security systems that operate across modern infrastructure environments.

Automation & AI-Driven Response

• Implement response automation using SOAR platforms or custom workflows to reduce manual effort.
• Integrate AI and machine learning techniques to improve signal quality, anomaly detection, and alert triage.
• Optimize automated workflows to help reduce response time and improve operational efficiency.

Cross-Functional Security Operations

• Partner with Security Operations to improve alert prioritization, usability, and investigation workflows.
• Collaborate with Incident Response to support investigations and drive detection improvements.
• Influence detection strategy and system direction at a Staff level across teams.

Measurement & Continuous Improvement

• Establish detection metrics such as coverage, fidelity, and time to detect.
• Track platform performance to identify gaps and guide ongoing improvements.