Senior Threat Detection & Response Engineer

Rippling (Netherlands); Seattle (WA); Hybrid; USD 168,000 - 280,000; Full time

Job summary

Rippling is seeking a hands-on Senior Detection and Response Security Engineer to advance our security program. You will drive detection and response strategies through automation, data collection, and innovative logic, collaborating with the security team and broader engineering org.

We value a strong background in security monitoring, incident response, and threat hunting, with practical tool development skills (Python) and experience with MITRE ATT&CK.

Qualifications

• 4+ years of full-time experience in security monitoring, incident response, and threat hunting.
• Proficient in developing automation and tooling using DevOps practices (Python preferred).
• Understanding of MITRE ATT&CK, adversary tactics, and incident response.
• Experience with large-scale data analysis, modeling, and correlation.
• Cross-platform forensics on macOS, Windows, and Linux.
• Familiarity with current SIEM and SOAR platforms.
• Ability to analyze endpoint, network, and application logs for anomalies.

Responsibilities

• Design and implement tools to gather security telemetry from cloud production systems.
• Lead automation of workflows to speed up detection and response.
• Develop and refine detection rules to counter emerging threats.
• Improve processes, procedures, and technology for detection and response.
• Advance SIEM, case management, and automation frameworks.
• Create runbooks and incident playbooks for detections.
• Lead proactive threat hunting and integrate findings into controls.

Skills

Security engineering

Threat hunting

Data analysis

Log analysis

Tools

Python

SIEM

SOAR

Forensics tools

Job description

Rippling is seeking a hands-on Senior Detection and Response Security Engineer to advance our security program. You will drive detection and response strategies through automation, data collection, and innovative logic, collaborating with the security team and broader engineering org.

We value a strong background in security monitoring, incident response, and threat hunting, with practical tool development skills (Python) and experience with MITRE ATT&CK.