Security Operations & Detection Engineer (SecOps) – AI Cloud
Bitdeer· Oct 13, 2026 · 15d ago
San Jose, CA, US
Location
In office
Work mode
Full-time
Schedule
Mid
Level
$115K–$166K est.
Estimated compensation
3+ years exp
Experience
Job description
Bitdeer is a world-leading technology company for AI and Bitcoin mining infrastructure.
Bitdeer is committed to providing comprehensive Bitcoin mining solutions for its customers and building AI computational infrastructure to support the AI revolution. Bitdeer handles complex processes involved in computing such as equipment procurement, transport logistics, data center design and construction, equipment management, and daily operations. Bitdeer also offers advanced cloud capabilities to customers with high demand for artificial intelligence.
Headquartered in Singapore, Bitdeer has deployed data centers across multiple countries, including the United States, Norway, Bhutan, and Ethiopia.
To learn more, visit ir.bitdeer.com
About the Role
We are seeking a hands-on Security Operations & Detection Engineer to join our AI Cloud Security team on the SecOps line. Based in Los Angeles, this role focuses on real-time security alert monitoring, triage, incident response, and active detection engineering across AI Cloud’s production estate—spanning GPU/AIDC infrastructure, our core cloud platform, and public-facing services.
This is a technical, hands-on operations and engineering role (not a policy or management position) working regular US Pacific daytime hours, featuring tight collaboration with our global security team.
Responsibilities
• Security Monitoring & Response: Perform on-shift triage, containment, escalation, and post-incident writeups for P1/P2 security incidents across our GPU/AIDC infrastructure, cloud platform, and public services.
• SLA Adherence: Consistently meet team SLAs for critical incidents (P1 acknowledgment within $\le$ 15 minutes, response start within $\le$ 30 minutes).
• Detection Engineering: Continuously tune and build alert rules within our self-built SIEM, HIDS, and WAF telemetry to suppress false positives and keep paging high-signal.
• Alert-Triage Automation: Contribute to building and refining agentic triage workflows to automate routine responses and reduce noise.
• Cross-Site Collaboration: Conduct daily written and live handoffs with our Singapore security team to ensure seamless global operations across shifts.
Requirements
• Experience: 3+ years of hands-on experience in a SOC, Incident Response (IR), or Detection Engineering role, with comfort acting as the primary on-shift responder.
• Infrastructure Fundamentals: Strong Linux and Kubernetes fundamentals; comfortable operating across cloud platforms and bare-metal/GPU environments.
• Query & Scripting: Practical SIEM query experience (OpenSearch, Splunk DSL, or similar) and scripting skills in Python or Go .
• Host Detection & Log Analysis: Direct experience with host-based detection tools (Falco, Wazuh, auditd), log analysis, and standard IR tooling.
• Schedule Flexibility: Willingness and ability to participate in a weekend on-call rotation.
Nice-to-Haves / Preferred Qualifications
• Specialized Threat Experience: Hands-on incident response experience with crypto-mining malware or supply-chain security incidents.
• Runtime & eBPF Security: Exposure to eBPF-based detection or runtime security tools (e.g., Tetragon, Falco internals).
• AI/GPU Infrastructure: Familiarity with high-performance computing environments (NVIDIA DGX/HGX, InfiniBand, or RoCE networking).
• Languages: Professional fluency in Mandarin to facilitate day-to-day collaboration with our Singapore engineering site (English is required).
• Certifications: Industry certifications such as GCIH, GCIA, or CISSP are a plus.
--------------------------------------------------------------------
Bitdeer is committed to providing equal employment opportunities in accordance with country, state, and local laws. Bitdeer does not discriminate against employees or applicants based on conditions such as race, color, gender identity and/or expression, sexual orientation, marital and/or parental status, religion, political opinion, nationality, ethnic background or social origin, social status, disability, age, indigenous status, and union.
Requirements
Must-haves
Bitdeer is a world-leading technology company for AI and Bitcoin mining infrastructure.
Headquartered in Singapore, Bitdeer has deployed data centers across multiple countries, including the United States, Norway, Bhutan, and Ethiopia.
This is a technical, hands-on operations and engineering role (not a policy or management position) working regular US Pacific daytime hours, featuring tight collaboration with our global security team.
Security Monitoring & Response: Perform on-shift triage, containment, escalation, and post-incident writeups for P1/P2 security incidents across our GPU/AIDC infrastructure, cloud platform, and public services.
SLA Adherence: Consistently meet team SLAs for critical incidents (P1 acknowledgment within $\le$ 15 minutes, response start within $\le$ 30 minutes).
Detection Engineering: Continuously tune and build alert rules within our self-built SIEM, HIDS, and WAF telemetry to suppress false positives and keep paging high-signal.
Alert-Triage Automation: Contribute to building and refining agentic triage workflows to automate routine responses and reduce noise.
Cross-Site Collaboration: Conduct daily written and live handoffs with our Singapore security team to ensure seamless global operations across shifts.
Experience: 3+ years of hands-on experience in a SOC, Incident Response (IR), or Detection Engineering role, with comfort acting as the primary on-shift responder.
Infrastructure Fundamentals: Strong Linux and Kubernetes fundamentals; comfortable operating across cloud platforms and bare-metal/GPU environments.
Query & Scripting: Practical SIEM query experience (OpenSearch, Splunk DSL, or similar) and scripting skills in Python or Go .
Host Detection & Log Analysis: Direct experience with host-based detection tools (Falco, Wazuh, auditd), log analysis, and standard IR tooling.
Schedule Flexibility: Willingness and ability to participate in a weekend on-call rotation.
Specialized Threat Experience: Hands-on incident response experience with crypto-mining malware or supply-chain security incidents.
Runtime & eBPF Security: Exposure to eBPF-based detection or runtime security tools (e.g., Tetragon, Falco internals).
AI/GPU Infrastructure: Familiarity with high-performance computing environments (NVIDIA DGX/HGX, InfiniBand, or RoCE networking).
Languages: Professional fluency in Mandarin to facilitate day-to-day collaboration with our Singapore engineering site (English is required).