17 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Respond to security events by triaging alerts, conducting investigations and incident analysis, and communicating with stakeholders.
- Improve detection and response processes, procedures, and technologies.
- Develop and operate tools to collect security telemetry from cloud production systems.
- Automate workflows and improve the identification and response time for security events.
- Build and optimize detection rules and develop runbooks and incident playbooks.
- Lead threat hunting practices and incorporate findings into security controls.
Requirements
- 10+ years of full-time security engineering experience, including security monitoring, incident response, and threat hunting in a cloud environment.
- Defensive security experience with an understanding of offensive security and compromise scenarios.
- Experience leading complex investigations involving many stakeholders.
- Strong communication skills and experience communicating with internal and external stakeholders at all levels.
- Expertise with AWS security controls and services.
- Experience using coding for automation, alert enrichment, and detections.
- Knowledge of adversary tactics, techniques, and procedures and MITRE ATT&CK principles.
- Hands-on experience with data analysis, modeling, and correlation at scale.
- Operating-system internals and forensics experience across macOS, Windows, and Linux.
- Experience managing and working with current SIEM and SOAR platforms.
- Experience developing tools and automation with common DevOps toolsets and programming languages.
- Understanding of malware functionality and persistence mechanisms.
- Ability to analyze endpoint, network, and application logs for anomalous events.
Benefits
- Rippling is an equal opportunity employer committed to a diverse and inclusive workforce.
- Reasonable accommodations are available for candidates with disabilities during the hiring process.
- Office-based employees within a defined radius are expected to work in the office at least three days per week under current policy.
About Rippling
Rippling builds a unified workforce management platform that combines HR, payroll, IT, and finance software for businesses on a single system. Its SaaS suite covers onboarding, payroll, time tracking, benefits, device and identity management, spend/expenses, and accounting integrations with ERPs like NetSuite, QuickBooks, Microsoft Dynamics 365, and Oracle. Founded in 2016 and headquartered in San Francisco, Rippling is privately held and serves companies from startups to large enterprises.