Senior Threat Detection & Response Engineer - Equity

Rippling; San Francisco (CA); On-site; USD 151,000 - 280,000; Full time

Job summary

Rippling in San Francisco, CA is seeking a hands-on Senior Detection and Response Security Engineer to advance our security program. You will drive automation, data collection, and detection logic across engineering and security teams.

As a key engineer, you will shape SIEM and SOAR tooling, build runbooks, and lead threat hunting to identify and mitigate novel attack vectors while collaborating to raise security posture across the company.

Qualifications

• 4+ years of full-time security engineering experience focusing on monitoring, incident response, and threat hunting.
• Proficient in tool development and automation using common DevOps stacks, especially Python.
• Solid understanding of ATT&CK framework, TTPs, and threat modeling.
• Experience with large-scale data analysis, modeling, and correlation.

Responsibilities

• Design and implement tools to collect security telemetry from cloud production systems.
• Automate workflows to improve speed and accuracy of detection and response.
• Develop and refine detection rules against emerging threats.
• Improve processes and technologies for detection and response.
• Advance SIEM, Case Management, and automation frameworks.
• Create runbooks and incident playbooks for detections.
• Lead proactive threat hunting and integrate findings into controls.

Skills

Python

Threat hunting

Security monitoring

Incident response

Data analysis

Log analysis

Tools

SIEM/SOAR

Job description

Rippling in San Francisco, CA is seeking a hands-on Senior Detection and Response Security Engineer to advance our security program. You will drive automation, data collection, and detection logic across engineering and security teams.

As a key engineer, you will shape SIEM and SOAR tooling, build runbooks, and lead threat hunting to identify and mitigate novel attack vectors while collaborating to raise security posture across the company.