Staff Security Engineer at Ripple Labs

<div class="content-intro"><p><span style="font-weight: 400;">At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. </span></p> <p><span style="font-weight: 400;">If you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value.</span></p></div><div> <p><strong>THE WORK:</strong></p> <p>As a Staff Security Engineer on the Security Operations team, you will help Ripple detect, investigate, and respond to security threats across our environment. You'll work across detection and data engineering, incident response, and security automation — building the tooling and detection logic that lets the team scale. You'll operate independently on sophisticated investigations and detection initiatives, and you'll be a technical reference point for less senior engineers on the team.</p> <p><strong>WHAT YOU’LL DO:</strong></p> <ul> <li>Design, build, and tune detections across our security stack (Google Security Operations) to improve our ability to identify and mitigate threats.</li> <li>Lead incident response for the most complex and high-severity investigations, from initial triage through root cause and remediation.</li> <li>Build and maintain security automation workflows (e.g., in Tines) that reduce manual toil in detection, triage, and response.</li> <li>Own and improve SIEM/data pipeline health, including log source coverage, parsing/normalization, and alert quality.</li> <li>Develop cross-functional relationships to influence security initiatives and drive adoption of security tooling.</li> <li>Maintain awareness of the evolving threat landscape and translate that awareness into concrete improvements to our detection coverage and response playbooks.</li> <li>Use AI tools as more than a chatbot — agentic coding tools like Claude Code or OpenAI Codex for detection engineering and automation work — while knowing when a given tool is (and isn't) the right fit, and verifying output before it ships.</li> <li>Participate in the design review process, giving and receiving constructive feedback to keep detection and automation projects on track — and break complex detection challenges into simple systems and repeatable processes other engineers can build and maintain.</li> </ul> </div> <d