hirly

Serval

Security Engineer, Detection and Response

San Francisco

hirly Pro

Get in front of the people hiring at Serval

  • Reach the hiring manager at Serval on LinkedIn, from your own account
  • hirly applies to this job for you, with unlimited applications
  • A resume and cover letter written for this job, unlimited
  • The hiring manager and recruiter at Serval, with contact details
Get Pro for this job →

$49 a month · ₹1,999 for 30 days in India · cancel any time

See how you match this job — and similar ones. Free.

Upload your resume and hirly scores it against this role at Serval first, then against similar open jobs, and shows where you fit and why.

PDF or DOCX, up to 12MB. No sign-up to see your matches.

Get past the screening software and onto a recruiter's desk

hirly rewrites your resume for this job — matching the keywords and skills in the posting, moving your most relevant experience to the top, and writing a cover letter to fit. About 30 seconds.

  • Keywords matched to this posting
  • Fit score before you apply
  • Cover letter included

Matched against 3M live jobs from 220,000+ employers in 200+ countries.

Tailor my resume for this job →

Apply from your AI assistant

Connect hirly to Claude or ChatGPT and ask it to apply to this job. hirly tailors your resume, fills the employer’s form and asks before sending.

Some employer sites stop an application at a CAPTCHA or sign-in and hand it back with a link. Applying needs a paid plan. Works with any assistant that supports MCP.

hirly's read of this role

Role family
Engineering
Seniority
Mid level
Stated salary
$200,000 – $325,000 per year
Country
US
Work mode
On-site / unstated
First seen by hirly
7 Nov 2026

Derived automatically from the posting. Upload your resume above to see how the role scores against it.

the posting

Who We Are

Serval is the AI-native enterprise service management platform that automates the work legacy IT service management tools only track. Our AI agents build the automations that power employee support, then resolve requests against them instantly—helping teams across IT, HR, finance, legal, and beyond automate work within one governed platform.

Companies including Fox, Live Nation, Notion, Ramp, and Lucid Motors run on Serval. Headquartered in San Francisco, we’ve raised $277 million from investors including Sequoia Capital, Redpoint Ventures, First Round, General Catalyst, and Elad Gil, most recently a $150 million Series C at a $3 billion valuation.

We’re building a team that moves quickly, takes ownership, and wants to make a meaningful impact on how the world’s largest organizations work. Come help us build what’s next for enterprise service management.

Role Overview

As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in.

You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval.

What You'll Do

Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure.

Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow.

Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed.

Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments.

Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought.

Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems.

What You'll Need

Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations.

Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams.

Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people.

Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority.

Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives.

Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions.

Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment.

What We Offer

Impact : Be a key player in shaping the success of our product and company.

Growth : Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company.

Culture : Join a culture that values innovation, ownership, accountability, and fun.

Original posting on Serval's site ↗

Listed on hirly, a job board. hirly is not the employer: Serval is hiring for this role.

Browse similar roles

Want this one?

Upload your resume and hirly rewrites it for this job and writes the cover letter — in about thirty seconds, before you sign up.

Tailor my resume for this job