Senior Security Incident Response Engineer - Detection

Ripple; United States; On-site; USD 172,000 - 215,000; Full time

Benefits offered by this job

Bonus

Equity

Mobile stipend

R&R days

Wellness reimbursement

Vacation policy

Parental leave

Catered lunches

Job summary

Ripple is hiring a Senior Security Engineer to detect, investigate, and respond to threats across our environment. You will build detections, lead high-severity investigations, and mentor junior engineers while shaping security tooling adoption across IT and engineering teams.

You will also develop automation workflows, maintain SIEM pipelines, and stay ahead of evolving threats, applying practical engineering judgment to verify outputs before deployment.

Qualifications

• 5+ years in security operations, detection engineering, or incident response.
• Advanced knowledge of security principles, tools, and practices.
• Experience with SIEM and security data pipelines.
• Strong scripting/automation using Python or SOAR.
• Ability to lead high-severity investigations and mentor others.

Responsibilities

• Design, build, tune detections across security stack to improve threat ID.
• Lead incident response for high-severity investigations from triage to remediation.
• Build and maintain security automation workflows (e.g., in Tines).
• Own and improve SIEM/data pipeline health and alert quality.
• Develop cross-functional relationships to drive tooling adoption.
• Maintain awareness of threat landscape and update playbooks.
• Mentor and guide junior engineers on the team.

Skills

Security operations

Detection engineering

Incident response

Python scripting

SOAR tooling

SIEM experience

EDR tooling

REST APIs

Tools

Google SecOps

Tines

REST APIs

Job description

Ripple is hiring a Senior Security Engineer to detect, investigate, and respond to threats across our environment. You will build detections, lead high-severity investigations, and mentor junior engineers while shaping security tooling adoption across IT and engineering teams.

You will also develop automation workflows, maintain SIEM pipelines, and stay ahead of evolving threats, applying practical engineering judgment to verify outputs before deployment.