Tech Lead, Detection & Response
Hadrian is hiring a Tech Lead, Detection & Response in Los Angeles, United States. Level rates it ; you can apply on Hadrian.
Level's read on this job
- On Level's scale, this role is Works on AI ●●●○: the daily work is on AI products, without building the model.
- Tools and skills the posting cites include SIEM, Edr and Soar.
- Level classifies it as a lead role.
- Level lists 165 other open roles at Hadrian.
AI in this role
Lead the detection and response engineering team by building an AI-native D&R stack with LLM-assisted triage and automation.
Hadrian is building autonomous factories to reindustrialize America. By combining AI, advanced software, robotics, and full-stack manufacturing, we help aerospace and defense companies build rockets, satellites, aircraft, ships, and other mission-critical systems up to 10x faster and at significantly lower cost.
Following our $1.37B Series D at a $7.87B valuation, Hadrian is rapidly expanding our manufacturing footprint, launching new capabilities across welding, casting, forging, electronics, additive manufacturing, and more, while scaling our Factory-as-a-Service platform to transform how critical products are built.
Backed by leading investors including JPMorgan Chase, Valor Equity Partners, Andreessen Horowitz, Founders Fund, 137 Ventures, Lux Capital, T. Rowe Price, and Morgan Stanley, we’re building the future of American manufacturing—and looking for exceptional people to help make it happen.
If you’re ready to take on the most challenging and rewarding work of your career while helping create American manufacturing jobs for generations to come, you’re exactly who we’re looking for.
The Role
As Tech Lead for Detection & Response, you will be the senior technical owner of how Hadrian detects, investigates, and responds to threats across our corporate, cloud, and factory environments. This is a hands-on senior IC role leading a small team: you will set the technical direction, build the next-generation AI-native detection stack, and lead from the keyboard.
What You’ll Do
Own detection & response end to end — strategy, architecture, and hands-on engineering — across corporate, cloud, and factory environments
Design and build an AI-native D&R stack: detection-as-code, LLM-assisted triage and enrichment, and agentic response automation
Lead incident response from triage through containment, remediation, and postmortem, including high-severity scenarios
Set technical direction for a small detection & response team; mentor engineers and raise the bar on detections, playbooks, and tooling
Partner with IT, infrastructure, and compliance teams to meet ITAR and CMMC detection, monitoring, and response requirements
What We’re Looking For
8+ years of security engineering experience with deep, hands-on detection & response expertise (SIEM, EDR, cloud and identity telemetry, SOAR)
Strong software engineering skills with detection-as-code and infrastructure-as-code fluency
A track record of setting technical direction as a tech lead, team lead, or anchor senior IC
Demonstrated application of AI/LLM tooling to security workflows — and sound judgment about its limits
Experience leading incident response end to end in production environments
What Will Set You Apart
Red team, penetration testing, or adversary emulation experience at any point in your career
Experience in ITAR, CMMC, or other regulated defense or government environments
Exposure to OT/ICS or manufacturing environment security
Production experience building agentic or LLM-based security automation
0→1 experience building a security capability at a fast-scaling startup
Benefits for Full-time Employees
Medical, dental, vision, and life insurance plans for employees
401kRelocation support may be provided for certain situations, based on business need.
Flexible vacation policy
Equity
ITAR Requirements
To conform to U.S. Government export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen or national, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
Use of AI in hiring
Hadrian uses AI-assisted tools in our recruiting and hiring processes to help our team work more efficiently. This may include tools that help organize and analyze recruiting data, as well as an AI-powered notetaker that can record and transcribe interviews and help coordinate feedback. These tools support our team and are not used to make hiring decisions. All candidate evaluations and hiring decisions are performed by humans. If an interview will be recorded, you will be notified in advance and may opt out at any time with no impact on your candidacy. Candidate data processed through these tools is subject to the same protections described in our Privacy Policy.
Consideration of Criminal History
Hadrian will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of all applicable laws. We do not ask about criminal history on our application, and we do not consider criminal history before making a conditional offer of employment.
Hadrian Is An Equal Opportunity Employer
Hadrian does not unlawfully discriminate on the basis of race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, marital status, mental status, physical disability or any other legally protected status. When necessary, the Company also makes reasonable accommodations for disabled candidates and employees, including for candidates or employees who are disabled by pregnancy, childbirth, or related medical conditions.
How we rate this
Tech Lead, Detection & Response at Hadrian rates 65 out of 100 for how much of the daily work is AI. That makes it Works on AI (AI Level 3 of 4). The level is about AI in the job, not seniority.
Works on AI. The daily work is on AI products, without building the model.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Questions you could be asked
- Tell me about a project where security engineering was part of your work. What did you do?
- Tell me about a project where incident response was part of your work. What did you do?
- Tell me about a project where detection as code was part of your work. What did you do?
- Tell me about a project where llm triage was part of your work. What did you do?
- Walk me through how you've used SIEM in your day-to-day work.
Adapt your resume
- List these exact terms on your resume: Security Engineering, Incident Response, Detection As Code, LLM Triage, and SIEM. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
- Show where AI is part of your daily process, not a one-off project. This role expects it to be a running habit.
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new AI jobs (Works on AI ●●●○ or higher) by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Other roles that work on AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step