Lead Security Engineer, Detection & Response

Maven Clinic; New York (NY); Hybrid; USD 221,000 - 299,000; Full time

Benefits offered by this job

Hybrid work model

Parental leave & family benefits

Career development stipend

Job summary

Maven Clinic is seeking a Staff Security Engineer to own our Detection & Response program. You will lead investigations, review production code, and improve SDLC security while managing AI/LLM risks. The role sits in a hybrid New York area setting with collaboration across security and engineering teams.

You’ll apply threat modeling, code review, and proactive vulnerability hunts to reduce incidents. A strong security background and clear communication are essential for guiding peers and

Qualifications

• 6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM ownership.
• Reading production code across languages to judge exploitability.
• Ability to build threat models of codebases and data flow to anticipate issues.
• Track record of finding and fixing systemic weaknesses from incidents or proactive reviews.
• Strong communication skills to direct investigations and influence peers.

Responsibilities

• Lead investigations hands-on: pull logs, narrate what happened, advise on next steps.
• Read production code to understand behavior.
• Identify and fix weaknesses in SDLC and controls.
• Propose or manage fixes, ranging from code changes to process enhancements.
• Collaborate with Product Security Engineer on systemic improvements.
• Own and tune detection logic for 7AI and alert criteria.
• Close gaps in logging and visibility for better investigations.
• Manage security risks of AI and LLM tooling.

Skills

Security experience

Code literacy

Threat modelling

Communications

Investigation leadership

Education

GCIH, GCFA, GCDA, OSCP, or CISSP

Tools

AI SOC platforms

LLM-based triage

Agentic escalation systems

Job description

Maven Clinic is seeking a Staff Security Engineer to own our Detection & Response program. You will lead investigations, review production code, and improve SDLC security while managing AI/LLM risks. The role sits in a hybrid New York area setting with collaboration across security and engineering teams.

You’ll apply threat modeling, code review, and proactive vulnerability hunts to reduce incidents. A strong security background and clear communication are essential for guiding peers and