Staff Security Engineer, Detection & Response

Staff Security Engineer who owns Maven Clinic's incident detection and response programme, guiding a small team that includes an AppSec engineer and an infrastructure security engineer. The engineer leads investigations hands-on, reading logs and production code and advising leaders on next steps; between incidents, they threat-model systems, hunt for bugs and SDLC gaps and fix them directly or drive the fixes, tune detection logic in the 7AI platform, close logging gaps and manage risk from LLMs, AI-generated code and agents.

Maven wants six or more years combining software or AppSec depth with detection and SIEM ownership, the ability to judge exploitability from code, and experience threat-modelling codebases; AI SOC tooling and GCIH, GCFA or OSCP help. The role is hybrid from New York or other hub cities.