Staff Security Engineer: Threat Detection & IR Lead

Hidden Road; Dublin; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Equity

Mobile phone stipend

R&R days

Generous vacation policy

Parental leave

Job summary

Ripple is looking for a Staff Security Engineer to join our Security Operations team in Ireland. You will design detections, lead incident response, and build automation to scale security across our environment.

You will own SIEM and data pipelines, work with EDR and identity tools, and mentor junior engineers while shaping threat coverage and playbooks in a fast-paced startup culture. We value practical, proactive security with clear communication.

Qualifications

• 7+ years in security operations, detection, or incident response.
• Advanced knowledge of blue teaming principles and security tooling.
• Proficient in at least one scripting language for automation and REST APIs.
• Experience with SIEM platforms and log pipelines; not just queries.

Responsibilities

• Design, build, and tune detections across our security stack to identify threats.
• Lead incident response for complex, high-severity investigations from triage to remediation.
• Build security automation workflows to reduce manual toil in detection and response.
• Own and improve SIEM/data pipeline health, log coverage, parsing, and alerts.
• Develop cross-functional relationships to drive security tooling adoption.
• Maintain awareness of evolving threat landscape and translate into improvements.
• Use agentic AI tools for detection engineering and automation, with verification.
• Participate in design reviews and break complex challenges into repeatable systems.

Skills

Security operations

Detection engineering

Incident response

Scripting (Python)

REST APIs

SIEM platforms

EDR and network security

Communication & collaboration

Threat intelligence awareness

Tools

EDR tooling

Identity security tools

Email security tools

Job description

Ripple is looking for a Staff Security Engineer to join our Security Operations team in Ireland. You will design detections, lead incident response, and build automation to scale security across our environment.

You will own SIEM and data pipelines, work with EDR and identity tools, and mentor junior engineers while shaping threat coverage and playbooks in a fast-paced startup culture. We value practical, proactive security with clear communication.