SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Ripple is seeking a Staff Security Engineer to join the Security Operations team in Dublin. In this role, you will be a technical leader responsible for detecting, investigating, and responding to security threats across Ripple's environment. You'll operate independently on sophisticated investigations and detection initiatives while serving as a technical reference point for junior engineers.
Key responsibilities include designing and tuning detections across Google Security Operations to identify and mitigate threats; leading incident response for complex, high-severity investigations from triage through root cause analysis and remediation; building and maintaining security automation workflows using tools like Tines to reduce manual work; owning SIEM and data pipeline health including log source coverage, parsing, normalization, and alert quality; and developing cross-functional relationships to drive adoption of security tooling.
You'll also maintain awareness of the evolving threat landscape and translate that into concrete improvements to detection coverage and response playbooks. The role emphasizes using AI tools strategically—such as agentic coding tools like Claude Code or OpenAI Codex—for detection engineering and automation while knowing when and how to apply them effectively. You'll participate in design reviews, providing constructive feedback and breaking down complex detection challenges into simple, repeatable systems that other engineers can maintain.
Required qualifications include 7+ years in security operations, detection engineering, or incident response with a track record of owning work end-to-end. You'll need advanced knowledge of blue teaming principles and tools, proficiency in at least one scripting language for automation and REST API work, hands-on experience with SIEM platforms (particularly Google SecOps), and practical experience with EDR, identity, email security, and network security tooling at a level where you can extend and tune systems. Strong technical communication skills, the ability to break down complex projects into manageable components, and the capacity to coach and empower junior engineers are essential.
