Senior Security Engineer: Detection & Incident Response

Ripple Inc.; San Francisco (CA); On-site; USD 172,000 - 215,000; Full time

Benefits offered by this job

Competitive salary

Equity

Health benefits

Retirement benefits

Generous vacation policy

Parental leave

Job summary

Ripple Inc. is seeking a Senior Security Engineer to join the Security Operations team in San Francisco.

You will design, implement, and tune detections, lead high‑severity incident responses, and build automation to scale threat detection and response across our environment. You will own SIEM pipelines, work with Google SecOps, and mentor junior engineers while collaborating with IT and engineering teams to improve security tooling and playbooks.

Qualifications

• 5+ years of experience in security operations, detection engineering, or incident response with end-to-end ownership of incident response and detection work.
• Strong knowledge of security principles, tools, and practices used in detection and response operations.
• Hands-on experience with scripting/automation and REST APIs to connect security tools.

Responsibilities

• Design, build, and tune detections across the security stack to improve threat identification and mitigation.
• Lead incident response for high-severity investigations from triage to remediation.
• Build and maintain security automation workflows to reduce manual toil in detection and response.
• Own and improve SIEM/data pipeline health, including log source coverage and alert tuning.
• Develop cross-functional relationships to influence security initiatives and tooling adoption.
• Maintain awareness of the evolving threat landscape and translate into concrete improvements.

Skills

Security operations

Detection engineering

Incident response

Scripting automation

REST APIs

SIEM platforms

EDR

Identity security

Network security

Technical mentoring

Documentation

Tools

Google SecOps

Job description

Ripple Inc. is seeking a Senior Security Engineer to join the Security Operations team in San Francisco.

You will design, implement, and tune detections, lead high‑severity incident responses, and build automation to scale threat detection and response across our environment. You will own SIEM pipelines, work with Google SecOps, and mentor junior engineers while collaborating with IT and engineering teams to improve security tooling and playbooks.