SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Hadrian is building autonomous factories to reindustrialize American manufacturing, combining AI, advanced software, robotics, and full-stack manufacturing to help aerospace and defense companies build mission-critical systems up to 10x faster and at lower cost. The company recently closed a $1.37B Series D at a $7.87B valuation and is rapidly expanding manufacturing capabilities across welding, casting, forging, electronics, and additive manufacturing.
As Tech Lead for Detection & Response, you will be the senior technical owner of threat detection, investigation, and response across Hadrian's corporate, cloud, and factory environments. This is a hands-on senior individual contributor role that leads a small team while maintaining significant keyboard time.
Key responsibilities include owning detection and response strategy, architecture, and engineering across all environments; designing and building an AI-native detection stack with detection-as-code, LLM-assisted triage and enrichment, and agentic response automation; leading incident response from triage through containment and remediation in high-severity scenarios; setting technical direction for the detection and response team while mentoring engineers; and partnering with IT, infrastructure, and compliance teams to meet ITAR and CMMC requirements.
You will need 8+ years of security engineering experience with deep hands-on detection and response expertise including SIEM, EDR, cloud and identity telemetry, and SOAR platforms. Strong software engineering skills with detection-as-code and infrastructure-as-code fluency are essential. You should have a track record of setting technical direction as a tech lead or anchor senior IC, demonstrated application of AI/LLM tooling to security workflows with sound judgment about limitations, and experience leading incident response end-to-end in production environments.
Experience that sets you apart includes red team, penetration testing, or adversary emulation work; background in ITAR, CMMC, or other regulated defense or government environments; exposure to OT/ICS or manufacturing security; production experience building agentic or LLM-based security automation; and 0→1 experience building security capabilities at fast-scaling startups.
Note: ITAR compliance required—must be a U.S. citizen, lawful permanent resident, or eligible to obtain required authorizations from the U.S. Department of State.
