5 hours ago
Responsibilities
- Design, build, and tune detections across Google Security Operations to improve threat identification and mitigation.
- Lead high-severity incident response investigations from triage through root-cause analysis and remediation.
- Build and maintain Tines security automation workflows for detection, triage, and response.
- Own SIEM and security data pipeline health, including log source coverage, parsing, normalization, and alert quality.
- Build cross-functional relationships to influence security initiatives and drive adoption of security tooling.
- Monitor the evolving threat landscape and improve detection coverage and response playbooks accordingly.
- Use Claude Code and OpenAI Codex for detection engineering and automation when appropriate, verifying outputs before release.
- Participate in design reviews, provide and receive feedback, and create repeatable processes that other engineers can maintain.
- Serve as a technical reference point and coach for less senior engineers.
Requirements
- 7+ years of experience in security operations, detection engineering, or incident response, with end-to-end ownership of incident response and detection work.
- Advanced knowledge of blue-team security principles, tools, and practices, including advanced proficiency in at least one scripting language and experience automating security operations through APIs.
- Experience with SIEM platforms and security data pipelines, including log source onboarding, parsing, normalization, and alert tuning.
- Hands-on experience extending and tuning EDR, identity, email security, and network security tooling.
- Ability to write clear technical specifications, identify project risks, evaluate trade-offs, and break complex projects into maintainable systems and processes.
- Ability to handle ambiguous or high-pressure situations while demonstrating flexibility, professionalism, integrity, and strong problem-solving.
- Ability to understand people’s needs and capabilities and coach, motivate, and empower other engineers.
Benefits
- Professional development budget
- Hybrid/in-office flexibility with teams deciding which 10+ days per month to work in the office
- Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support
- Employee giving match
- Mobile phone stipend
- R&R days, generous vacation, wellness reimbursement, and parental leave and family planning benefits
- Catered lunches, stocked kitchens, and team events
- Full-time employee benefits apply
Categories
About Ripple
Using proven crypto and blockchain technology honed over a decade, Ripple’s enterprise-grade solutions are faster, more transparent, and more cost-effective than traditional financial services. Our customers use these solutions to source crypto, facilitate instant payments, empower their treasury, engage new audiences, lower capital requirements, and drive new revenue. Founded in 2012, Ripple's vision is to enable a world where value moves as seamlessly as information flows today—an Internet of Value. Ripple is the only enterprise blockchain company today with products in commercial use. Ripple’s global payments network includes over 300 customers across 40+ countries and six continents.