Senior Security Engineer - Detection & Response

In this Senior Security Engineer role, you will strengthen Klaviyo’s Detection & Response (D&R) capabilities across enterprise, cloud, and product environments. You’ll develop detections, drive investigations, and automate D&R workflows at scale, collaborating with a cross-functional team to advance AI-first security initiatives. The position blends engineering, threat hunting, and incident response to prevent repetitive work and improve security outcomes. You’ll work with diverse regions and on-call rotations, shaping security tooling and data-driven defense.

• annual cash bonus plan
• equity
• sign-on payments
• health benefits
• welfare and wellbeing benefits
• competitive compensation

• Develop, test, and deploy detections-as-code with high fidelity (rule-based and anomaly-based)
• Detect and respond to cyber threats using security data lake, SIEM, and cloud platforms
• Lead end-to-end incident response investigations and digital forensic activities
• Automate and codify D&R workflows and processes
• Build security tooling to automate the D&R lifecycle
• Improve maintenance of detection and response pipelines and underlying systems
• Collaborate with Threat Intelligence to identify sophisticated threats
• Develop AI-first security systems to automate detection and response
• Conduct threat hunts across corporate, cloud, and product environments
• Support data engineering workflows for security data lake and SIEM platforms
• Participate in D&R on-call rotations
• Coach and mentor security engineers within the team

• 5+ years of hands-on security experience in modern cloud environments
• Experience in triaging and responding to cyber threats
• Experience in large-scale log analysis, incident response and/or digital forensics
• Experience with centralized security data lakes and SIEM solutions
• Hands-on experience in writing detections-as-code
• Solid data querying skills (e.g. SQL, Splunk)
• Familiarity with large-scale data pipelines and data engineering techniques
• Proficient in programming languages to automate/build (e.g., Python, Go)
• Proven experience with git/GitHub and CI/CD automations
• Familiarity with TTPs used by threat actors
• Experience on-call in detection/response or incident response
• Engineering-first and AI-first approach to work
• Strong learning mindset and ongoing tech updates
• Strong oral and written communication skills
• Team player with self-managing work ethic

• strong communication
• team player
• self-motivated and autonomous
• detections-as-code
• SIEM
• security data lake