← All roles

Senior Security Engineer - Detection & Response

Rippling· Engineering
Apply on company site
Hybrid (San Francisco, CA)$168k - $280kfull-timePosted 1mo ago

About the role

Hands-on Senior Detection and Response Security Engineer to advance Rippling's security program through advanced automation, data collection, and detection logic. Collaborates with security and engineering teams to elevate security efforts, SIEM/Case Management, and automation frameworks.

Responsibilities

  • Innovative Tool Development: Design and implement sophisticated tools to gather security telemetry data from cloud production systems, enhancing detection and response.
  • Automation and Optimization: Lead automation of workflows to improve speed and accuracy of security event identification and response.
  • Detection Rule Development: Build and refine advanced detection rules to protect against emerging cyber threats.
  • Process and Technology Enhancement: Drive continuous improvement of detection and response processes, procedures, and technologies.
  • Strategic Development: Spearhead advancements in SIEM, Case Management, and Automation frameworks.
  • Comprehensive Documentation: Develop detailed runbooks and incident playbooks for new and existing detections.
  • Proactive Threat Hunting: Lead threat hunting initiatives and integrate findings into security controls.

Qualifications

  • 4+ years of full-time experience as a security engineer, focusing on security monitoring, incident response, and threat hunting.
  • Proficiency in developing tools and automation using common DevOps toolsets, with a preference for Python.
  • Practical understanding of common attacks, adversary TTPs, and MITRE ATT&CK principles.
  • Hands-on experience with large-scale data analysis, modeling, and correlation.
  • Expertise in operating systems internals and forensics for macOS, Windows, and Linux.
  • Experience managing and working with current SIEM and SOAR platforms.
  • Ability to analyze endpoint, network, and application logs for anomalous events.

Skills

Required:Security monitoringThreat huntingPythonMITRE ATT&CK

Benefits

  • competitive salary + benefits + equity
  • reasonable accommodations for candidates with disabilities upon request
  • in-office collaboration expectations within certain miles of an office (onsite three days/week for new employees first six months)
Last updated Oct 7, 2026. Interested? Apply on the company site.
Rippling logo

About Rippling

#1 Workforce Management System | HR, IT, Finance

Rippling eliminates the friction from running a business, combining HR, IT, and Finance apps on a unified data platform.

HRPayrollITFinanceGlobal
Company profileWebsite

More open roles at Rippling