4 hours ago
Responsibilities
- Design, build, and tune detections across Google Security Operations
- Lead complex and high-severity incident-response investigations from triage through root-cause analysis and remediation
- Build and maintain Tines security automation workflows for detection, triage, and response
- Own SIEM and security data pipeline health, including log coverage, parsing, normalization, and alert quality
- Develop cross-functional relationships to influence security initiatives and drive security-tooling adoption
- Monitor the evolving threat landscape and improve detection coverage and response playbooks
- Use agentic coding tools such as Claude Code and OpenAI Codex appropriately for detection engineering and automation, verifying outputs before release
- Participate in design reviews and create simple, repeatable systems for other engineers to maintain
Requirements
- 7+ years of experience in security operations, detection engineering, or incident response, with end-to-end ownership of incident response and detection work
- Advanced knowledge of blue-team security principles, tools, and practices
- Advanced proficiency in at least one scripting language and experience using APIs to automate security operations
- Experience with SIEM platforms and security data pipelines, including log onboarding, parsing, and alert tuning
- Hands-on experience extending and tuning EDR, identity, email security, and network security tooling
- Ability to write clear technical specifications, identify project risks, and evaluate trade-offs
- Ability to break down complex projects into maintainable systems and processes and participate constructively in design reviews
- Ability to resolve ambiguous or high-pressure situations while maintaining flexibility, professionalism, and integrity
- Ability to understand people's needs and coach, motivate, and empower others
Benefits
- Professional development budget
- Flexible in-office collaboration with teams deciding which 10+ days per month employees come in
- Team offsites, team bonding activities, and happy hours
- Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support
- Employee giving match
- Mobile phone stipend
- R&R days, generous vacation, wellness reimbursement, and weekly onsite and virtual programming
- Industry-leading parental leave and family planning benefits
- Catered lunches, fully stocked kitchens, premium snacks and beverages, and other events
- Benefits listed are for full-time employees
Categories
About Ripple
Using proven crypto and blockchain technology honed over a decade, Ripple’s enterprise-grade solutions are faster, more transparent, and more cost-effective than traditional financial services. Our customers use these solutions to source crypto, facilitate instant payments, empower their treasury, engage new audiences, lower capital requirements, and drive new revenue. Founded in 2012, Ripple's vision is to enable a world where value moves as seamlessly as information flows today—an Internet of Value. Ripple is the only enterprise blockchain company today with products in commercial use. Ripple’s global payments network includes over 300 customers across 40+ countries and six continents.