---
title: 'Data Engineer at detections.ai'
canonical: 'https://feeny.ai/job/data-engineer-detections-ai-california-yy7cb2nan10h'
type: 'job'
last_seen: '2026-09-05'
---

# Data Engineer at detections.ai

- **Company:** detections.ai
- **Location:** California, United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2025-08-28
- **Last confirmed live:** 2026-09-05
- **Apply:** https://jobs.gem.com/detections-ai/am9icG9zdDqFJ4NXXDo4dJCH_QeCjxkp

## Job description

Transform raw signals into actionable intelligence. Build the pipelines that turn chaos into clarity.

At detections.ai, we believe that great detection starts with great data. We're looking for a data engineer who doesn't just move bytes—but architects the intelligence infrastructure that helps security teams see threats before they strike. This is your chance to build the data foundation that powers the future of threat detection.

You’ll Own:

- Backend services end-to-end – from first design sketch to production deployment.
- High-throughput data pipelines that transform messy security telemetry into clean, enriched streams.
- Integrations with SIEMs, EDRs, and security platforms that make our product the connective tissue of the modern security stack.
- Cross-team collaboration with frontend, AI, and detection engineers to ensure data becomes truly actionable.
- Core architecture and APIs that other engineers (and customers) will build on every day.

You’re a Fit If You:

- Have 5+ years building and scaling backend systems that handle real-world complexity.
- Are fluent in Python (FastAPI preferred) and cloud-native development on AWS or GCP.
- Can design data models and transformation logic for complex, real-time workflows.
- Build with resilience, security, and performance as first principles.
- Thrive in a high-context, low-process environment where speed and ownership matter.

You’ll Stand Out If You:

- Have hands-on experience with SIEMs, SOARs, detection pipelines, or IR tools.
- Have worked with event streaming/orchestration systems (Kafka, Kinesis, Airflow).
- Understand security-first architecture (RBAC, audit logs, multi-tenancy).
- Have built on OpenSearch or DynamoDB for large-scale, fast data access.

Tech Stack:

- Frontend: React.js, Tailwind CSS, TypeScript
- Middle Layer: Node.js, TypeScript
- Backend: Python (FastAPI)
- Infra & DevOps: AWS, GCP, Docker, Terraform, GitHub Actions
- Data: OpenSearch, DynamoDB
- AI Agents: Gemini, Anthropic, OpenAI
- Tooling: Figma, Storybook, CI/CD pipelines

The Offer:

- Remote-first with meaningful equity
- Build for real users: Work side-by-side with detection engineers.
- Own meaningful problems: Architect the systems that make detections possible.
- Move fast without red tape: Small, high-context team with outsized impact.
- Shape product and culture: Your work is foundational to the company’s success.

This isn't just another data engineering role—it's your chance to build the data foundation that powers the next generation of threat detection.

## About detections.ai

## Company Overview
- **One-liner**: A community-driven platform for detection engineers to share, discover, and build security detections across multiple SIEM languages.
- **Entity Type**: Private (Seed stage; Seed round in November 2025 led by Modern Technical Fund)
- **Headquarters**: San Francisco, California, United States
- **Founded**: Not publicly available (seed round in 2025 suggests a very early-stage startup)
- **Founders**: Prasanth Ganesan (Co-Founder & CTO) – other co-founders not publicly named

## Core Business
- **Primary industry**: Computer and Network Security (Detection Engineering)
- **Target customers**: B2B – detection engineers, security operations teams, enterprises running SIEM/EDR platforms
- **Mission or purpose**: "Building better detections, together" – a world where detection engineers collaborate openly, knowledge compounds, and no one solves the same problem twice.

## Products & Services
- **Community Platform (Free, Forever)**: Browse 20,000+ community-contributed detections in languages including Sigma, KQL, SPL, YARA, YARA-L, S1QL, Cortex QL, CQL, and Suricata. Save, publish, and translate across 9 languages.
- **AI Assistant**: Paste a threat intel report, blog post, or threat actor profile; AI drafts a detection and refines logic iteratively. Also translates detections between SIEM formats while preserving logic.
- **Intel Exchange**: Structured threat reports scored on actionability (1-10) linked to existing detections and CVEs. Publicly browseable.
- **Enterprise** (launched July 2026): Private team workspace, governance, coverage tracking across multiple SIEMs, AI Agents that audit for drift, staleness, noise, and overlap. Deploy back to SIEMs. Coverage reports.

## Market Standing
- **Valuation**: Not disclosed
- **Key Metric**: Total funding – Seed round (November 2025) from 3 investors led by Modern Technical Fund; amount not disclosed
- **Notable Investors/Partners**: Modern Technical Fund (lead), plus two other unnamed investors. No strategic partners publicly listed.
- **Growth Signals**: Headcount grew +533.3% YoY (15 employees as of mid-2026); 16,000+ detection engineers use the community; Enterprise launch with AI agents; webinars and growing contributor base; monthly website traffic up 16% (1,509 visits, small but growing).

## Competitive Advantages
- **Community-led library**: 20,000+ detections contributed by peers – network effects make the platform more valuable as more engineers join.
- **Multi-language translation**: Seamlessly convert detections between 9 SIEM languages (Sigma, KQL, SPL, YARA-L, etc.) without manual porting.
- **AI-assisted detection generation**: Reduces time from threat intel to working detection – "coverage before lunch".
- **MITRE ATT&CK mapping**: Coverage visibility across the entire detection stack.
- **Open platform**: Free tier for individual contributors encourages widespread adoption and community trust.

## Strategic Focus
- **Enterprise adoption**: Monetizing the community platform with a paid Enterprise tier that adds governance, AI agents, and coverage tracking.
- **AI agent expansion**: Continuous auditing and tuning of detection libraries to reduce noise and drift.
- **Growing the contributor base**: Encouraging high-quality submissions through contributor features (subscriptions, webinars) to deepen the content moat.

## Why Work Here
- **Culture**: "Detection-obsessed" – a tight-knit team of domain experts passionate about collaborative security engineering. Emphasizes knowledge compounding and open sharing.
- **Remote-first**: Fully remote environment (employees in United States and Canada).
- **Growth stage**: Early-stage startup with rapid headcount growth (+533% YoY) – opportunity to shape product and culture.
- **Tech stack**: Modern tools including TypeScript, React, Python, PyTorch, Elasticsearch, Docker, GitHub Actions, and multiple cloud services (AWS likely).
- **Notable perks**: Not explicitly listed, but typical of seed-stage remote startups: flexible hours, equity, direct impact on product direction.

## Sources
1. [detections.ai](https://detections.ai)
2. [About – Detections AI](https://detections.ai/about)
3. [Built In – detections.ai](https://builtin.com/company/detections-ai)
4. [LinkedIn – detections.ai](https://linkedin.com/company/detectionsai)
5. [Gem Careers – detections.ai](https://jobs.gem.com/detections-ai)

## Other roles at detections.ai

- [Marketing Manager](https://feeny.ai/job/marketing-manager-detections-ai-california-a3eb4yycks9v) — California, United States
- [Vice President of Engineering](https://feeny.ai/job/vice-president-of-engineering-detections-ai-california-z8nwe6yttgtt) — California, United States
- [Artificial Intelligence Engineer](https://feeny.ai/job/artificial-intelligence-engineer-detections-ai-california-xhphez3sxn7k) — California, United States
- [Frontend Developer](https://feeny.ai/job/frontend-developer-detections-ai-california-6mmhb82dxzbv) — California, United States
- [Data Engineer](https://feeny.ai/job/data-engineer-siteminder-pune-bmcc0yj3ttby) — Pune, India
- [Data Engineer](https://feeny.ai/job/data-engineer-future-processing-gliwice-f8cp0tctfjmd) — Gliwice, Poland
- [Data Engineer](https://feeny.ai/job/data-engineer-xcimer-energy-denver-nf6k4sr1dzcn) — Denver, CO
- [Data Engineer](https://feeny.ai/job/data-engineer-scott-logic-bristol-2x8fz0r00jjn) — Bristol, United Kingdom
- [Data Engineer](https://feeny.ai/job/data-engineer-oxylabs-vilnius-zaj01zcyf0kq) — Vilnius, Lithuania
- [Data Engineer](https://feeny.ai/job/data-engineer-moniepoint-poland-s1fvb5j64pw7) — Poland