Staff Security Engineer, AI-Driven Detection & Response

Socket.dev; Reno (NV); On-site; USD 205,000 - 256,000; Full time

Benefits offered by this job

Company Stock Plan

Unlimited vacation

Educational and wellness reimburse m-

Job summary

Ridgeline is seeking a Staff Security Engineer for Detection and Response to lead architectural design of our Detections and Response roadmap. You will influence SIEM/SOAR integrations, drive AI-augmented detection, and manage high-impact incidents across AWS and our tech stack.

Join a security team that values ownership, transparency, and action, while mentoring engineers and shaping global security strategy across engineering groups.

Qualifications

• 8+ years in detection, security ops, IR, or software engineering with leadership experience.
• Advanced proficiency in Python or similar high-level language.
• Experience engineering AI/LLM-driven detection, triage, and investigation workflows.
• Expertise mapping detections to attacker TTPs (MITRE ATT&CK).
• Experience building detection-as-code and alerting pipelines.
• Strong AWS logging/telemetry and compute knowledge.
• Infrastructure as code (Terraform) and CI/CD proficiency.
• Strong written and verbal communication; able to explain decisions clearly.

Responsibilities

• Shape the DART roadmap based on priorities and threat models.
• Close detection gaps by variant analysis and broad class fixes.
• Architect AI-powered detection and triage pipelines to reduce false positives.
• Collaborate on SIEM, SOAR, and security platforms for scalable telemetry ingestion.
• Own incident response program architecture and remediation workflows.
• Set technical direction for DART codebases and infrastructure.
• Establish AI usage guardrails and responsible deployment standards.
• Mentor junior and mid-level engineers through reviews and problem solving.

Skills

Cross-functional leadership

Python

AI/LLM-driven systems

MITRE ATT&CK mappings

AWS ecosystem

Terraform

CI/CD practices

Communication

Tools

AWS CloudTrail

GuardDuty

CloudWatch

Lambda

ECS/EKS

Athena

IAM analysis

Terraform

Job description

Ridgeline is seeking a Staff Security Engineer for Detection and Response to lead architectural design of our Detections and Response roadmap. You will influence SIEM/SOAR integrations, drive AI-augmented detection, and manage high-impact incidents across AWS and our tech stack.

Join a security team that values ownership, transparency, and action, while mentoring engineers and shaping global security strategy across engineering groups.