Senior/Staff Security Engineer, Detection & Response

Through our blockchain technology & rapidly growing network of financial institutions, Ripple is improving the global financial system & increasing economic inclusion for more people, in more places around the world.  Ripple is looking for passionate Information Security professionals to build a world class Information Security program.  As part of the Information Security team, you will help us achieve this mission by actively working to protect our staff, company, & the larger crypto communities we engage with.  

Ripple's Detection & Response team defends against internal & external threats across our company & services. We are focused on protecting Ripple, our revolutionary payment technology, our employees, & our customers. To accomplish this, we are building data pipelines & detections, automating incident response, & developing leading-edge solutions to collect & analyze data in both security incidents & investigations.  As an Detection & Response Engineer, you will build & grow your career in all of these areas.

WHAT YOULL DO:

• Help lead the overall detection & response strategy
• Continually improve our ability to monitor for anomalies & detect malicious activity
• Analyze applications & systems to identify relevant data sources for threat detections
• Tune & test detection logic to reduce false positives & noise
• Work with technology vendors to optimize security services for peak effectiveness
• Research & collaborate internally & externally on open-source solutions
• Automate response processes with SOAR & related technologies
• Act in a purple team capacity to ensure effectiveness of security systems & controls
• Participate in cross-functional security functions to help drive continual program improvements

WHAT WERE LOOKING FOR:

• 5+ years of experience working within a security operations environment
• At least  year of experience in writing detections, SIEM rules, or EDR 
• Significant experience with standard  incident response processes
• Expertise in a broad range of information technologies, such as public cloud infrastructure (AWS,GCP), authentication systems, vulnerability management solutions, network infrastructure, etc.
• Someone that has contributed to the development of detection & alerting pipelines
• Experience in dissecting attacker methodologies & techniques
• Comprehensive understanding of product & infrastructure logs from a security perspective
• Experience building & delivering projects from start to finish
• Knowledge of a broad range of attacker tactics, techniques, & procedures (TTPs)
• Above all, a team player that can handle challenging situations, a rapidly maturing security culture, & an eagerness to mentor less experienced engineers

What We Offer (USA):

• 100% paid medical & dental & 95% paid vision insurance for employees; 65% paid for employee dependents

• Generous Health & Wellness reimbursement program
• Industry-leading parental leave policies
• Flexible vacation policy - work with your manager to take time off when needed
• Modern offices in San Francisco, London, New York & Singapore
• Fully-stocked kitchen with organic snacks, beverages & coffee drinks (and catered lunch twice a week!)
• Monthly team social activities like outings to sports games, happy hours, game nights & more!
• A culture of learning & development: employees have access to professional development workshops & reimbursement for continued learning  

Ripple provides one frictionless experience to send money globally using the power of blockchain. By joining Ripples growing, global network (RippleNet), financial institutions can process their customers payments anywhere in the world instantly, reliably & cost-effectively. Banks & payment providers can use the digital asset XRP to further reduce their costs & access new markets.

With offices in San Francisco, New York, London, Mumbai, Singapore, So Paulo, Reykjavk, Washington D.C. & Dubai, Ripple has more than 300 customers around the world.

Learn more about engineering at Ripple by visiting our blog, Get Technical."

Ripple is an Equal Opportunity Employer. Were committed to building a diverse & inclusive team. We do not discriminate against qualified employees or applicants because of race, color, religion, gender identity, sex, sexual preference, sexual identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, military status, or any other characteristic protected by local law or ordinance.

Please find our UK/EU applicant privacy notice here.