--- title: 'Security Engineer, Detection and Response at Serval' canonical: 'https://feeny.ai/job/security-engineer-detection-and-response-serval-san-francisco-dkev0d16deh4' type: 'job' last_seen: '2026-10-16' --- # Security Engineer, Detection and Response at Serval - **Company:** Serval - **Location:** San Francisco, CA - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-10-07 - **Last confirmed live:** 2026-10-16 - **Apply:** https://jobs.ashbyhq.com/serval/7d249a25-e3b6-43e9-ae17-d3df3d349cd5 ## Job description ## Who We Are [Serval](http://serval.com) is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ## Role Overview As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. ## What You'll Do - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. ## What You'll Need - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. ## What We Offer - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun. ## About Serval ## Core Business - **Primary industry**: IT Service Management (ITSM), Enterprise Software, AI-powered Automation - **Target customers**: B2B; IT, Security, HR, and Workplace teams at mid-market and enterprise organizations - **Mission statement**: “Reimagining the employee support experience” by helping everyone get out of the help desk and back to the work they enjoy. ## Products & Services - **Serval Platform (AI-Native ITSM)**: A unified help desk, access management, and automation platform. Includes AI agents (Help Desk Agent, Automation Agent, Insights Agent) that handle requests, provision access, answer knowledge base questions, and surface workflow suggestions. Supports natural-language workflow creation, code-based workflows with no-code UI, and flexible deployment (cloud, hybrid, self-hosted). - **Access Governance & Provisioning**: Manages access requests for any app, resource, or role with customizable policies, approvals, just-in-time provisioning, and automatic deprovisioning via SCIM, API, or AI-generated workflows. - **Asset Management**: Automatically reconciles data from MDM, procurement, IdP, and HRIS into a single source of truth. - **Knowledge Base**: Built-in docs with sync from Notion, Google Drive, Confluence; AI agent surfaces answers instantly. - **Compliance & Security**: SOC 2, HIPAA, GDPR compliant; SIEM integration; role-based access control; auditor-friendly logging. ## Market Standing - **Valuation**: $1 billion (post-money, as of Series B in December 2025) - **Total Funding**: $127 million - Seed (Oct 2025): $5M - Series A (Nov 2025): $47M led by Redpoint - Series B (Dec 2025): $75M led by Sequoia Capital - **Notable Investors/Partners**: Sequoia Capital, Redpoint, and other top-tier investors. - **Growth Signals**: Headcount grew 494.7% year-over-year (from ~10 to 58 employees); 43 active job postings; expanding into UK, Malaysia, Switzerland; high-profile talent from ServiceNow, Verkada, Rippling, Scale AI. ## Competitive Advantages - **AI-native architecture**: Entire platform built around AI agents, not bolted-on AI. Workflows created via natural language. - **Code-based workflows with no-code simplicity**: Workflows stored as code (Git-friendly) but editable in a UI – appeals to both engineers and non-technical teams. - **Flexible deployment**: Cloud, hybrid, or fully self-hosted – rare for modern SaaS, attractive to regulated enterprises. - **Compliance out of the box**: SOC 2, HIPAA, GDPR, SIEM integration – reduces friction for enterprise sales. - **Two-way sync with existing ticketing systems**: Low migration barrier; can integrate with current tools. ## Strategic Focus - **Product expansion**: Continuing to build out AI agent capabilities, access governance, and workflow automation. - **Go-to-market**: Scaling sales and customer success teams (mid-market and enterprise); building brand as the “AI platform for employee support.” - **Global reach**: Opening presence in Europe and Asia to serve multinational clients. - **Hiring aggressively**: 43 open roles across engineering, sales, marketing, design, and customer success. ## Why Work Here - **Culture**: Described as “elite team of builders and sellers” with a focus on stunning colleagues; “Work hard. Celebrate often.” - **Remote/hybrid/office**: Headquarters in San Francisco; roles likely hybrid or on-site (many postings indicate location). Some remote-friendly roles may exist. - **Notable perks**: Working on a generational company; fast-growing startup with strong funding; opportunity to define the AI-native ITSM category. - **Engineering culture**: Emphasis on code-based workflows, Git integration, and AI agent development. Strong technical team with alumni from top companies (ServiceNow, Verkada, Rippling, Scale AI). - **Growth trajectory**: 494.7% headcount growth YoY, $1B valuation, recent Series B – high momentum and opportunity for impact. ## Sources 1. [serval.com](https://www.serval.com/) 2. [serval.com/careers](https://www.serval.com/careers) 3. [linkedin.com/company/getserval](https://www.linkedin.com/company/getserval) 4. [cbinsights.com/company/serval](https://www.cbinsights.com/company/serval) 5. [serval.com/serval-news/serval---operating-principles](https://www.serval.com/serval-news/serval---operating-principles) ## Other roles at Serval - [Recruiting Coordinator](https://feeny.ai/job/recruiting-coordinator-serval-new-york-2jgf8penjf4g) — New York, NY - [Talent and People Operations Generalist](https://feeny.ai/job/talent-and-people-operations-generalist-serval-san-francisco-4negfaavgqcc) — San Francisco, CA - [Solutions Engineer, Enterprise](https://feeny.ai/job/solutions-engineer-enterprise-serval-san-francisco-9mbtx39aqgrp) — San Francisco, CA - [Security Engineer, Corporate](https://feeny.ai/job/security-engineer-corporate-serval-san-francisco-d8rhrwnre4rc) — San Francisco, CA - [Field Marketing Manager](https://feeny.ai/job/field-marketing-manager-serval-new-york-xe6k9797t4mt) — New York, NY - [Head of Associate AE](https://feeny.ai/job/head-of-associate-ae-serval-san-francisco-6w79pm9hvwn0) — San Francisco, CA - [RVP Solutions Engineering, Mid-Market and Enterprise](https://feeny.ai/job/rvp-solutions-engineering-mid-market-and-enterprise-serval-san-francisco-vfzrv9vbtt1f) — San Francisco, CA - [Product Marketing Manager](https://feeny.ai/job/product-marketing-manager-serval-san-francisco-y56pme4zyjnt) — San Francisco, CA - [Product Marketing Lead](https://feeny.ai/job/product-marketing-lead-serval-san-francisco-qxh06jmrqyx0) — San Francisco, CA - [Deployment Strategist, Flagship Account](https://feeny.ai/job/deployment-strategist-flagship-account-serval-santa-clara-n73vv67pdeab) — Santa Clara, CA