# Senior Detection & Response Engineer, Cyber Defense at Nscale

Nscale is hiring a Senior Detection & Response Engineer, Cyber Defense. Level rates it Works on AI ●●●○; you can [apply on Nscale](https://jobsbylevel.com/go/8704cd2e-e109-4359-b103-fb151d892048?utm_medium=ai-agent).

AI Level 3, AI centrality 65 out of 100. UK.

## Details

- Company: [Nscale](https://jobsbylevel.com/companies/nscale)
- AI level: AI Level 3 (score 65 out of 100)
- Location: UK
- Posted: November 3, 2026
- Apply: https://jobsbylevel.com/go/8704cd2e-e109-4359-b103-fb151d892048?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=senior-detection-response-engineer-cyber-defense-at-nscale-e21933

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/senior-detection-response-engineer-cyber-defense-at-nscale-e21933

## Description

About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We're hiring a Senior Detection & Response Engineer in Cyber Defense to decide what Nscale detects, command incident response, and automate recurring security work across enterprise, cloud, production, data centre, and operational technology environments. You'll work with engineering, infrastructure, and service owners in a three-person regional rotation: roughly one operational week followed by two weeks focused on engineering and preparedness. In-house AI agents handle level 0 and level 1 around the clock; a managed provider covers weekends and escalates in defined circumstances. We're building follow-the-sun coverage across three regional hubs. Until every hub is staffed, the rotation includes out-of-hours on-call; the intended end state is conventional weekday hours in each region without night-time paging. This team owns detection engineering as well as response. Agents draft detection logic; you validate it and decide what goes live. Your mandate is to contain threats and fix recurring problems at their source, with success measured by the share of escalations permanently solved—not tickets closed. What you'll be doing Detection engineering Map detection coverage against attacker tradecraft and our environments, identifying blind spots and telemetry gaps. Turn incidents, threat research, coverage gaps, and recurring escalations into detection ideas, working with AI agents to build them. Assess agent-proposed rule logic in shadow mode before promotion: what it catches, what it misses, and how much noise it creates. Make the final call on production promotion and remain accountable for detection quality. You'll rarely write a query from scratch, but nothing goes live without your judgement. Retune or retire noisy, stale, or irrelevant detections, and build the business case for closing telemetry gaps. Automation and platform engineering Automate recurring enrichment, triage, containment, case handling, and reporting. Improve first-tier agents so they resolve more independently and escalate with better context. Build response actions, integrations, and agent tooling in our internal security platform, and prove they work in production. Incident command and preparedness Command security incidents: set objectives, coordinate engineering, infrastructure, and service owners, and keep leadership informed. Make containment decisions under time pressure, recognising what is pre-approved, what needs authority, and what could disrupt production. Run post-incident reviews that lead to engineering improvements. Design tabletop exercises and recovery tests, maintain practical playbooks, and automate steps that don't need a human. Ensure the evidence, access, knowledge, and authority needed for an incident are in place beforehand. Your operational week Assess escalations against asset and business context, decide on a response, and execute approved containment, including device isolation, session revocation, access restrictions, blocking, and evidence preservation. Identify a lasting fix wherever warranted. Build detection and automation fixes with the agents, or specify control changes clearly for

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/senior-detection-response-engineer-cyber-defense-at-nscale-e21933

Source: https://jobsbylevel.com/jobs/senior-detection-response-engineer-cyber-defense-at-nscale-e21933

## Cite this page

Level. https://jobsbylevel.com/jobs/senior-detection-response-engineer-cyber-defense-at-nscale-e21933.

Get job alerts: https://jobsbylevel.com/newsletter