Senior Security Engineer - Detection & Response (DART)

JobCubby; Hinoba-an; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Rippling is seeking an experienced Security Engineer to join our Detection and Response Team (DART). You will help scale our incident response, improve processes, and build detection infrastructure across production and corporate environments.

The role requires strong cloud security, threat hunting, and automation skills, with excellent communication to stakeholders. Responsibilities include responding to events, developing runbooks, leading threat-hunting efforts, and building tools to collect

Qualifications

• 7+ years of full-time security engineering experience including monitoring, incident response and threat hunting in cloud environments.
• Defensive security practitioner who understands offensive security and real-world compromise scenarios.
• Experience leading complex investigations with many stakeholders.
• Excellent communication with internal and external stakeholders at all levels.
• Expertise in AWS security controls and services.
• Experience coding for automation, alert enrichment and detections.
• Knowledge of adversary TTPs and MITRE ATT&CK framework.
• Hands-on data analysis, modeling and correlation at scale.
• OS forensics experience: macOS, Windows and Linux.
• Experience with current SIEM and SOAR platforms.
• Experience building tools and automation with DevOps toolsets and languages.
• Understanding malware functionality and persistence mechanisms.
• Ability to analyze endpoint, network and application logs for anomalies.

Responsibilities

• Respond to security events, triage, investigate incidents and communicate findings to stakeholders.
• Improve detection, response processes, and tooling post-incident debriefs.
• Develop and run tooling to collect telemetry from cloud production systems.
• Automate workflows to speed up detection and response times.
• Build and optimize detection rules to focus on meaningful alerts.
• Develop runbooks and incident playbooks for detections.
• Lead threat hunting activities and surface attacker signals for security controls.

Skills

Security monitoring

Incident response

Threat hunting

AWS security

Automation coding

MITRE ATT&CK

Data analysis

Forensics

SIEM & SOAR

DevOps tooling

Tools

SIEM

SOAR

DevOps toolchains

Job description

Rippling is seeking an experienced Security Engineer to join our Detection and Response Team (DART). You will help scale our incident response, improve processes, and build detection infrastructure across production and corporate environments.

The role requires strong cloud security, threat hunting, and automation skills, with excellent communication to stakeholders. Responsibilities include responding to events, developing runbooks, leading threat-hunting efforts, and building tools to collect