Senior Detection & Response Security Engineer — Hybrid

Rippling (Netherlands); New York (NY); On-site; USD 168,000 - 280,000; Full time

Benefits offered by this job

Benefits

Equity

Job summary

Rippling is seeking a hands-on Senior Detection and Response Security Engineer to drive our security program forward. You will develop sophisticated tooling to collect telemetry, automate detection and response workflows, and craft advanced detection rules to counter threats.

You will collaborate with security and engineering teams to elevate Rippling's security posture. The role emphasizes threat hunting, documentation, and continuous improvement of SIEM/SOAR capabilities, with a focus on

Qualifications

• 4+ years of full‑time experience in security engineering focusing on monitoring, incident response, and threat hunting.
• Proficiency in building tools and automation using DevOps toolsets, with a preference for Python.
• Solid understanding of ATT&CK techniques, threat models, and data analysis for large datasets.
• Experience with OS forensics across macOS, Windows, and Linux and with current SIEM/SOAR platforms.
• Strong log analysis skills for endpoint, network, and application logs.

Responsibilities

• Design and implement tools to gather security telemetry from cloud production systems.
• Automate workflows to improve speed and accuracy of security event detection and response.
• Develop and refine advanced detection rules to counter evolving threats.
• Improve detection/response processes, procedures, and technologies.
• Advance SIEM, case management, and automation frameworks; create runbooks and playbooks.
• Lead proactive threat hunting and integrate findings into security controls.

Skills

Security monitoring

Incident response

Threat hunting

Python automation

MITRE ATT&CK

Tools

SIEM

SOAR

Python

Job description

Rippling is seeking a hands-on Senior Detection and Response Security Engineer to drive our security program forward. You will develop sophisticated tooling to collect telemetry, automate detection and response workflows, and craft advanced detection rules to counter threats.

You will collaborate with security and engineering teams to elevate Rippling's security posture. The role emphasizes threat hunting, documentation, and continuous improvement of SIEM/SOAR capabilities, with a focus on