{"id":1503222,"url":"https://alion.io/job/ripple-senior-security-engineer","title":"Senior Security Engineer","company":{"id":4932,"name":"Ripple","domain":"ripple.com","url":"https://alion.io/company/ripple","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":93,"open_postings":23,"ghost_share":0,"stale_share":0.087,"repost_share":0,"time_to_fill_p50_days":88,"computed_at":"2026-10-03T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":172000,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Claude Code","optional":false},{"name":"Google SecOps","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Tines","optional":false}],"status":"live","first_seen_at":"2026-09-29T19:16:41Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-04T02:43:27Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. \nIf you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value.\nTHE WORK:\nAs a Senior Security Engineer on the Security Operations team, you will help Ripple detect, investigate, and respond to security threats across our environment. You'll work across detection and data engineering, incident response, and security automation - building the tooling and detection logic that lets the team scale. You'll operate independently on sophisticated investigations and detection initiatives, and you'll be a technical reference point for less senior engineers on the team.\nWHAT YOU’LL DO:\nDesign, build, and tune detections across our security stack (Google Security Operations) to improve our ability to identify and mitigate threats.\nLead incident response for sophisticated and high-severity investigations, from initial triage through root cause and remediation.\nBuild and maintain security automation workflows (e.g., in Tines) that reduce manual toil in detection, triage, and response.\nOwn and improve SIEM/data pipeline health, including log source coverage, parsing/normalization, and alert quality.\nDevelop cross-functional relationships (IT, engineering, other Ripple teams) to influence security initiatives and drive adoption of security tooling.\nMaintain awareness of the evolving threat landscape and translate that awareness into concrete improvements to our detection coverage and response playbooks.\nUse AI tools as more than a chatbot - agentic coding tools like Claude Code or OpenAI Codex for detection engineering and automation work - while knowing when a given tool is (and isn't) the right fit, and verifying output before it ships.\nMentor and provide technical guidance to less experienced engineers.\nWHAT YOU'LL BRING: \n5+ years of experience in security operations, detection engineering, or incident response, with a track record of owning incident response and detection work end-to-end.\nAdvanced knowledge of security principles, tools, and practices used in detection and response operations.\nStrong scripting/automation skills (Python or SOAR) - comfortable building and maintaining automation for response workflows and working with REST APIs to connect security tools.\nExperience with SIEM platforms and security data pipelines (e.g., Google SecOps) - you understand log source onboarding, parsing, and alert tuning, not just querying.\nHands-on experience with EDR, identity, email security, and network security tooling at a level where you can extend and tune the tooling, not just operate it.\nAbility to write clean technical specs, identify risks before starting major projects, and reason clearly about trade-offs between alternative approaches.\nProblem-solving skills to resolve ambiguous or high-pressure situations effectively and creatively, while maintaining flexibility, professionalism, and integrity.\nUnderstands and anticipates people's needs, skills, and abilities, to coach, motivate, and empower them for success.\nOther common names for this role: Security Engineer, Incident Response \nFor positions that will be based in CA, the annual salary range for this position is below. Actual salaries may vary based on numerous factors including, among other things, an individual applicant’s experience and qualifications for the position. This range does not include equity or additional compensation, such as bonuses or commissions. \nCA Annual Base Salary Range\n$172,000—$215,000 USD\nWHO WE ARE:\nDo Your Best Work\nThe opportunity to build in a fast-paced start-up environment with experienced industry leaders\nA learning environment where you can dive deep into the latest technologies and make an impact. A professional development budget to support other modes of learning.\nThrive in an environment where no matter what race, ethnicity, gender, origin, or culture they identify with, every employee is a respected, valued, and empowered part of the team.\nIn-office collaboration for moments that matter is important to our culture, and we give managers and teams the flexibility to decide which 10+ days a month they come in. \nBi-weekly all-company meeting - business updates and ask me anything style discussion with our Leadership Team\nWe come together for moments that matter which include team offsites, team bonding activities, happy hours and more!\nTake Control of Your Finances\nCompetitive salary, bonuses, and equity\nCompetitive benefits that cover physical and mental healthcare, retirement, family forming, and family support\nEmployee giving match\nMobile phone stipend\nTake Care of Yourself\nR&R days so you can rest and recharge\nGenerous wellness reimbursement and weekly onsite & virtual programming\nGenerous vacation policy - work with your manager to take time off when you need it\nIndustry-leading parental leave policies. Family planning benefits.\nCatered lunches, fully-stocked kitchens with premium snacks/beverages, and plenty of fun events\nBenefits listed above are for full-time employees. \nRipple is an Equal Opportunity Employer. We’re committed to building a diverse and inclusive team. We do not discriminate against qualified employees or applicants because of race, color, religion, gender identity, sex, sexual identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, military status, or any other characteristic protected by local law or ordinance.\nPlease find our UK/EU Applicant Privacy Notice and our California Applicant Privacy Notice for reference.","description_format":"text","description_chars":6057,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Generous vacation","Growth opportunities","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Financial Services","Financial Software & Embedded Finance","Blockchain Infrastructure"],"lifecycle":[{"event":"open","at":"2026-09-30T04:45:07Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":88,"reasons":["conf:5","velocity","win:early","comp:brand"],"computed_at":"2026-10-03T05:45:00Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":true},"html_url":"https://alion.io/job/ripple-senior-security-engineer","json_url":"https://alion.io/job/ripple-senior-security-engineer.json","meta":{"generated_at":"2026-10-04T03:05:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4681,"day_limit":5000,"remaining_today":319,"minute_limit":60,"resets_at":"2026-10-05T00:00:00Z"}}}