Senior Security Engineer

As a Senior Security Engineer on Ripple's Security Operations team, you help detect, investigate, and respond to security threats across the company's environment. You design detection logic, lead sophisticated incident investigations, and build automation that lets the team scale. You work independently on complex security challenges and serve as a technical mentor to less experienced engineers.

What you'll do

• Design, build, and tune detections across the security stack (Google Security Operations) to identify and mitigate threats more effectively.
• Lead incident response for sophisticated and high-severity investigations, from initial triage through root cause analysis and remediation.
• Build and maintain security automation workflows (for example, in Tines) that reduce manual work in detection, triage, and response.
• Own and improve SIEM and data pipeline health, including log source coverage, parsing, normalisation, and alert quality.
• Develop cross-functional relationships with IT, engineering, and other Ripple teams to influence security initiatives and drive adoption of security tooling.
• Maintain awareness of the evolving threat landscape and translate that into concrete improvements to detection coverage and response playbooks.
• Use AI tools strategically for detection engineering and automation work (agentic coding tools like Claude Code or OpenAI Codex), while knowing when a tool is the right fit and verifying output before it ships.
• Mentor and provide technical guidance to less experienced engineers.

What you bring

• 5+ years of experience in security operations, detection engineering, or incident response, with a track record of owning incident response and detection work end-to-end.
• Advanced knowledge of security principles, tools, and practices used in detection and response operations.
• Strong scripting and automation skills (Python or SOAR), comfortable building and maintaining automation for response workflows and integrating security tools via REST APIs.
• Experience with SIEM platforms and security data pipelines (such as Google SecOps), including log source onboarding, parsing, and alert tuning.
• Hands-on experience extending and tuning EDR, identity, email security, and network security tooling.
• Ability to write clear technical specifications, identify risks before major projects, and reason through trade-offs between alternative approaches.
• Problem-solving skills to resolve ambiguous or high-pressure situations effectively and creatively, while maintaining flexibility, professionalism, and integrity.
• Ability to understand and anticipate people's needs, skills, and abilities in order to coach, motivate, and empower them for success.

What we offer

• Annual base salary of $172,000-$215,000 USD (for California-based positions), plus equity and additional compensation such as bonuses.
• Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support.
• Professional development budget to support learning.
• Flexible in-office collaboration, with managers and teams deciding which 10+ days per month to come in.
• R&R days to rest and recharge.
• Generous wellness reimbursement and weekly onsite and virtual programming.
• Generous vacation policy, worked out with your manager.
• Industry-leading parental leave and family planning benefits.
• Employee giving match and mobile phone stipend.
• Catered lunches, fully-stocked kitchens, and team events.

About Ripple

Ripple builds crypto solutions for financial institutions, businesses, governments, and developers to improve the global financial system and create greater economic opportunity worldwide.