Senior Detection & Response Engineer — SIEM & Threat Hunt

Cedarparktexasedc; Austin (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Rippling is seeking a hands-on Senior Detection and Response Security Engineer to drive its security program forward. You will design tools to gather telemetry, automate workflows, and develop advanced detection rules across cloud production systems to protect against threats.

Collaborate with the security team and broader engineering org to elevate security efforts, extend SIEM/SOAR capabilities, and document playbooks for detections and investigations.

Qualifications

• 4+ years of full-time experience as a security engineer focusing on security monitoring, incident response and threat hunting.
• Proficient in developing tools and automation using DevOps toolsets, with a preference for Python.
• Deep knowledge of ATT&CK principles, TTPs and adversary techniques.
• Hands-on experience with large-scale data analysis, modeling, and correlation.
• Expertise in OS for macOS, Windows, and Linux for forensics.
• Experience managing current SIEM and SOAR platforms.
• Ability to analyze endpoint, network, and application logs for anomalous events.

Responsibilities

• Design and implement tools to gather security telemetry from cloud production systems to detect and respond to threats.
• Lead automation of workflows to improve speed and accuracy of security event identification and response.
• Develop and refine advanced detection rules to protect against cyber threats.
• Drive continuous improvement of detection and response processes, procedures, and technologies.
• Advance SIEM, Case Management and Automation frameworks for security operations.
• Create detailed runbooks and incident playbooks for detections and investigations.
• Lead proactive threat hunting initiatives and integrate findings into security controls.

Skills

Security monitoring

Python scripting

MITRE ATT&CK

Threat hunting

SIEM & SOAR

Log analysis

Tools

Splunk

SOAR platforms

Job description

Rippling is seeking a hands-on Senior Detection and Response Security Engineer to drive its security program forward. You will design tools to gather telemetry, automate workflows, and develop advanced detection rules across cloud production systems to protect against threats.

Collaborate with the security team and broader engineering org to elevate security efforts, extend SIEM/SOAR capabilities, and document playbooks for detections and investigations.