Detection & Incident Response Security Engineer

Maven Clinic; United States; Hybrid; USD 221,000 - 299,000; Full time

Benefits offered by this job

Hybrid work model

16 weeks parental leave

Professional development stipend

401K matching

Job summary

Maven Clinic seeks a Senior Security Engineer to own incident detection and response, threat modeling, and SDLC hardening. You’ll drive investigations, review code, and manage AI risk as the team expands with AI tools and LLMs.

You will lead debugging efforts, shape security controls, and collaborate with product and security peers to reduce risk while supporting a flexible hybrid work model in the US.

Qualifications

• 6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM ownership.
• Comfort reading production code across multiple languages and stacks.
• Experience building threat models of codebases, data flow, and trust boundaries.
• Track record of fixing systemic weaknesses from incidents or proactive reviews.
• Strong communication to direct investigations and influence peers.

Responsibilities

• Lead investigations hands-on, pull logs, narrate what happened, advise on next steps.
• Read production code to understand behavior and exploitability.
• Hunt for bugs and SDLC weaknesses; implement fixes or manage resolutions.
• Partner with Product Security Engineer on golden paths for systemic gaps.
• Tune detection logic and ensure logging/visibility supports investigations.

Skills

Threat modeling

Code reading

SIEM engineering

Incident investigations

Strong communication

AI security ops

Education

GCSE/Certifications in security (GCIH, GCFA, GCDA, OSCP, CISSP)

Job description

Maven Clinic seeks a Senior Security Engineer to own incident detection and response, threat modeling, and SDLC hardening. You’ll drive investigations, review code, and manage AI risk as the team expands with AI tools and LLMs.

You will lead debugging efforts, shape security controls, and collaborate with product and security peers to reduce risk while supporting a flexible hybrid work model in the US.