Senior Security Engineer: Threat Detection & IR Lead

Hidden Road; United States; Hybrid; USD 172,000 - 215,000; Full time

Benefits offered by this job

Equity

Bonuses

Healthcare

Retirement plan

Employee giving match

Phone stipend

Job summary

Ripple is seeking a Senior Security Engineer to join the Security Operations team. You will design, build, and tune detections across our security stack, lead high-severity incident responses, and develop automation to reduce manual toil.

You’ll own SIEM health, collaborate with IT and engineering, and mentor junior engineers while advancing detection coverage. The role supports hybrid work with on-site collaboration a few days a month and offers a competitive base salary with bonuses and

Qualifications

• 5+ years in security operations, detection engineering, or incident response.
• Advanced knowledge of security principles, tools, and practices used in detection and response operations.
• Strong scripting/automation skills (Python or SOAR) and REST API experience.
• Experience with SIEM platforms and security data pipelines (e.g., Google SecOps).
• Hands-on with EDR, identity, email security, and network security tooling and tuning.

Responsibilities

• Design, build, and tune detections across the security stack to mitigate threats.
• Lead incident response for sophisticated investigations from triage to remediation.
• Build and maintain security automation workflows to reduce manual toil.
• Own and improve SIEM/data pipeline health, including log source onboarding and alert tuning.
• Develop cross-functional relationships to drive security tooling adoption.

Skills

Security operations

Detection engineering

Incident response

Python

SOAR

REST APIs

SIEM

EDR

Identity security

Network security

Tools

Tines

Google SecOps

Log parsing

Data pipelines

Job description

Ripple is seeking a Senior Security Engineer to join the Security Operations team. You will design, build, and tune detections across our security stack, lead high-severity incident responses, and develop automation to reduce manual toil.

You’ll own SIEM health, collaborate with IT and engineering, and mentor junior engineers while advancing detection coverage. The role supports hybrid work with on-site collaboration a few days a month and offers a competitive base salary with bonuses and