Lead Detection & Response Security Engineer

Maven Clinic; New York (NY); Hybrid; USD 221,000 - 299,000; Full time

Benefits offered by this job

Hybrid work model

16 weeks paid parental leave

Professional development stipend

401K matching

Job summary

Maven Clinic seeks an experienced security leader to own the Incident Detection and Response program, including threat modeling, investigations, and guiding technical direction. You will focus on finding bugs earlier in the SDLC, managing AI/LLM-related risk, and driving fixes across engineering teams.

You will collaborate with AppSec and infrastructure engineers, reading production code as needed and shaping security controls across the stack.

Qualifications

• 6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM engineering ownership.
• Comfortable reading production code across multiple languages to judge exploitability.
• Experience building threat models of codebases and data flows to anticipate issues.
• Track record of finding and fixing systemic weaknesses, post-incident or proactively.
• Strong communication skills to direct investigations and influence peers.

Responsibilities

• Lead investigations hands-on: pull logs, narrate events, advise leadership on next steps.
• Read production code to understand what's happening and assess findings.
• Hunt for bugs and SDLC weaknesses; propose and implement fixes or manage resolution.
• Partner with Product Security Engineer on golden paths for systemic gaps.
• Own detection logic for 7AI and tune alerts; close gaps in logging and visibility.
• Manage AI risk by understanding and governing security issues from LLMs and AI tooling.

Skills

Security incident response

Threat modeling

SIEM ownership

Code reading

Strong communication

Tools

AI SOC platforms

LLM-based triage

Agentic escalation systems

Job description

Maven Clinic seeks an experienced security leader to own the Incident Detection and Response program, including threat modeling, investigations, and guiding technical direction. You will focus on finding bugs earlier in the SDLC, managing AI/LLM-related risk, and driving fixes across engineering teams.

You will collaborate with AppSec and infrastructure engineers, reading production code as needed and shaping security controls across the stack.