Staff Security Engineer — Lead Security Operations

Ripple; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Equity

Learning budget

In-office collaboration

Job summary

Ripple in London is seeking a Staff Security Engineer to join the Security Operations team. You will detect, investigate, and respond to threats across the environment, partnering with detection engineering, incident response, and security automation.

You’ll design detections, lead high-severity investigations, build automation with tools like Tines, and own SIEM/data pipelines. You’ll mentor engineers and translate threat intel into concrete improvements.

Qualifications

• 7+ years in security operations, detection engineering, or incident response.
• Advanced knowledge of blue team security principles and at least one scripting language.
• Experience with SIEM and security data pipelines.
• Hands-on with EDR, identity, email, and network security tooling.
• Ability to write technical specs and assess risks.
• Strong ability to break down complex projects into repeatable processes.
• Strong interpersonal skills and coaching/mentoring.

Responsibilities

• Design, build, and tune detections across our security stack to improve threat identification and mitigation.
• Lead incident response for complex, high-severity investigations from triage to remediation.
• Build and maintain security automation workflows (e.g., in Tines) to reduce manual toil.
• Own and improve SIEM/data pipeline health, including log onboarding, parsing, and alerting.
• Develop cross-functional relationships to influence security initiatives and tool adoption.
• Translate evolving threat landscape into concrete improvements to detection coverage and playbooks.
• Participate in design reviews and provide constructive feedback to simplify systems.

Skills

Security operations

Detection engineering

Incident response

Scripting (Python/JS)

REST API automation

SIEM platforms

EDR

Identity security

Network security tooling

Threat detection

Tools

Google SecOps

Tines

SIEM tooling

Job description

Ripple in London is seeking a Staff Security Engineer to join the Security Operations team. You will detect, investigate, and respond to threats across the environment, partnering with detection engineering, incident response, and security automation.

You’ll design detections, lead high-severity investigations, build automation with tools like Tines, and own SIEM/data pipelines. You’ll mentor engineers and translate threat intel into concrete improvements.