← All roles

Senior Security Engineer - DART (Detection and Response Team)

Rippling· Engineering
Apply on company site
Hybrid (Bangalore)Full-timePosted 1mo ago

About the role

Senior Security Engineer to join Rippling's Detection and Response Team (DART) to build a world-class incident response function, develop detection infrastructure, and scale security capabilities across Production and Corporate environments.

Responsibilities

  • Respond to security events, triage, perform investigations, incident analysis, and communicate clearly and efficiently to stakeholders
  • Contribute to improving processes, procedures, and technologies used for detection and response, enabling us to improve after each incident
  • Develop and run tools to gather security telemetry data from cloud production systems
  • Automate workflows and improve identification and response time for security events
  • Build and optimize detection rules, allowing us to spend our cycles on the alerts that matter
  • Develop runbooks and incident playbooks for new and existing detections
  • Lead Threat hunting practices, suggest product and infrastructure signals to surface attacks and incorporate findings into security controls

Qualifications

  • 7+ years of full-time experience as a security engineer, including security monitoring, incident response, and threat hunting in a cloud environment
  • A defensive practitioner who understands offensive security and, the actual scenarios that lead to compromise
  • Prior experience leading complex investigations with a large number of stakeholders
  • Strong communication skills and a proven track record of communicating with internal and external stakeholders at all levels
  • Expertise on AWS security controls and services
  • Experience leveraging coding for automation, alert enrichment and detections
  • Knowledge of adversary tactics, techniques, and procedures (TTPs) and MITRE ATT&CK principles
  • Hands-on experience with data analysis, modeling, and correlation at scale
  • Operating systems internals and forensics experience for macOS, Windows & Linux
  • Domain experience managing and working with current SIEM and SOAR platforms
  • Experience developing tools and automation using common DevOps toolsets and programming languages
  • Understanding of malware functionality and persistence mechanisms
  • Ability to analyze endpoint, network, and application logs for anomalous events

Skills

Required:Security incident responseCloud security (AWS)Automation and scriptingThreat huntingMITRE ATT&CKForensics (macOS/Windows/Linux)

Benefits

  • Not explicitly listed in the description
Last updated Sep 9, 2026. Interested? Apply on the company site.
Rippling logo

About Rippling

#1 Workforce Management System | HR, IT, Finance

Rippling eliminates the friction from running a business, combining HR, IT, and Finance apps on a unified data platform.

HRPayrollITFinanceGlobal
Company profileWebsite

More open roles at Rippling