Security Analyst/Detection Engineer

Details

Groq delivers fast, efficient AI inference. Our LPU-based system powers GroqCloud™, giving businesses and developers the speed and scale they need. From our Bay Area roots to our growing global presence, we are on a mission to make high performance AI compute more accessible and affordable.

As a Security Analyst / Detection Engineer, you’ll be a core member of Groq’s Security Engineering team, responsible for improving visibility, detection, and response capabilities across our global infrastructure. You’ll manage Groq’s HackerOne vulnerability intake, lead the tuning and deployment of detection tools, and contribute to incident triage and response playbooks. This role is highly cross-functional — partnering with product engineering, infrastructure, IT, and GRC.

Responsibilities

• Own the deployment, configuration, and tuning of threat detection tools across cloud, data center, and corporate environments (SIEM, EDR, and log pipelines).
• Manage the HackerOne triage process — review inbound reports, validate findings, reproduce vulnerabilities, and coordinate internal remediation and communication.
• Monitor and triage security alerts, investigate anomalies, and escalate incidents in coordination with senior engineers.
• Develop and maintain detection rules and response playbooks to standardize and accelerate incident handling.
• Assist in vulnerability scanning, patch management, and system hardening across Groq’s infrastructure.
• Contribute to security automation — build and refine scripts, integrations, and alerting pipelines to reduce manual workload and improve response speed.
• Support incident response and post-incident reviews, including root cause analysis and lessons learned documentation.
• Partner with the GRC team to track and close vulnerabilities, incidents, and control findings tied to compliance frameworks (SOC 2, ISO 27001, FedRAMP).
• Help define and maintain metrics and dashboards that measure detection effectiveness and control health.

Requirements

• 3–5 years of experience in information security, IT operations, or DevOps, ideally in a cloud or hybrid environment.
• Working knowledge of Linux systems, networking, cloud security (GCP, AWS, or Azure), and web application security.
• Hands-on experience with security monitoring and detection tools (examples: CrowdStrike, Chronicle, Wiz, Tenable, Splunk, SentinelOne).
• Exposure to vulnerability management and bug bounty programs (HackerOne, Bugcrowd, etc.).
• Scripting or automation skills in Python and Bash.
• Understanding of threat detection methodologies, log correlation, and incident response fundamentals.
• Strong documentation and communication skills.
• Curiosity, humility, and a drive to continuously improve detection capabilities and response maturity.

Nice to have

• Prior experience managing or tuning SIEM or EDR solutions at scale.
• Experience creating detection logic (Sigma, YARA, or custom rule sets).
• Familiarity with Google Cloud security controls, IAM policies, and logging architecture.
• Experience with container and CI/CD security (Kubernetes, GitHub Actions).
• Security certifications such as CompTIA Security+, CySA+, GCIA, or AWS Security Specialty.

Attributes of a Groqster

• Humility — Egos are checked at the door
• Collaborative & Team Savvy — We make up the smartest person in the room, together
• Growth & Giver Mindset — Learn it all versus know it all, we share knowledge generously
• Curious & Innovative — Take a creative approach to projects, problems, and design
• Passion, Grit, & Boldness — No-limit thinking, fueling informed risk taking

Compensation & Benefits

• Base salary range: $223,600 to $263,000 (base salary is part of a comprehensive compensation package including equity and benefits).
• Groq is an Equal Opportunity Employer and is committed to providing reasonable accommodations to qualified individuals with disabilities. Offers of employment are contingent upon verification of identity and employment authorization.

Additional notes

• Groq encourages applicants with diverse backgrounds, including those with criminal record histories, in accordance with applicable local Fair Chance laws and ordinances.