Staff Security Engineer - Detection and Response

Helps steer the roadmap of Ridgeline's Detections and Response Team (DART) as a staff engineer, architecting detection and response across the company's AWS-based investment management platform and beyond. The engineer closes whole classes of detection gaps through variant analysis, builds AI-assisted detection and triage pipelines that keep false positives low, co-designs SIEM and SOAR ingestion, enrichment and alerting, owns the technical maturity of incident response and leads major incidents, sets team standards for responsible AI use, and mentors other engineers.

Ridgeline wants eight or more years in detection, security operations, incident response or software engineering, strong Python, real experience building and validating LLM-driven security workflows, ATT&CK-mapped detection as code, deep AWS logging knowledge and Terraform. Based in San Ramon or Reno.