Staff Security Engineer, Detection & Response
About this role
Maven Clinic builds the world's largest virtual clinic for women and families, partnering with employers and health plans to provide end-to-end family health programs. The security team owns the incident detection and response program, threat modeling systems and codebases, and directing investigations when incidents happen. This staff-level engineer will spend most of their time finding bugs and gaps in the SDLC before they become incidents, and managing risk as the company expands its reliance on LLMs, AI-generated code, and agents.
Candidates joining this team will lead investigations hands-on, pull logs, build narratives, and advise engineering leaders. The right person possesses a strong background combining hands-on software or AppSec depth with detection and SIEM engineering ownership, along with a track record of finding and fixing systemic weaknesses. They will guide technical direction and judgment calls alongside an AppSec engineer and an infrastructure engineer.
What you will do
- Lead incident investigations hands-on by pulling logs, building narratives of what happened, and advising business and engineering leaders on next steps.
- Read production code when needed to understand runtime behavior and determine if findings are actually exploitable.
- Hunt for bugs in the codebase and weaknesses in the software development lifecycle where problems can slip past existing controls.
- Propose and implement fixes directly or manage resolution with the appropriate teams.
- Partner with the Product Security Engineer on golden paths when a weakness points to a systemic gap.
- Own and tune detection logic running through 7AI, validating investigations and escalations while setting alert criteria.
- Manage the security risks associated with the growing use of LLMs and AI tooling in internal adoption and built products.
What you need
- Bring 6 or more years of security experience combining hands-on software or AppSec depth with detection and SIEM engineering ownership.
- Demonstrate comfort reading production code across multiple languages and stacks well enough to judge exploitability.
- Possess experience building threat models of codebases, reasoning about attack surface, trust boundaries, and data flow.
- Have a proven track record of finding and fixing systemic weaknesses through incidents or proactive reviews.
- Display strong communication skills with enough credibility to direct investigations and influence peers informally.
Nice to have
- Hands-on experience with AI-assisted security operations tooling such as AI SOC platforms, LLM-based triage, or agentic escalation systems
- Interest or experience in securing AI and LLM-powered systems including risks like prompt injection, model misuse, or agentic tool abuse
- Prior exposure to golden-path or secure-by-default infrastructure initiatives
- Experience with container or image security and the patching lifecycle
- A relevant certification such as GCIH, GCFA, GCDA, OSCP, or CISSP
Benefits
- Employer-covered health, dental, and insurance plan options
- Maven for Mavens access to the full platform and specialists for mental health, reproductive health, family planning, and pediatrics
- Whole-self care through wellness partnerships, hybrid work, in-office meals, and work-together days
- 16 weeks 100 percent paid parental leave and new parent stipend for eligible employees
- Annual professional development stipend and access to a personal career coach through Maven for Mavens
- 401K matching for US-based employees with immediate vesting
Skills and tech stack
Questions candidates ask
What is the remote work policy?
Maven embraces a flexible hybrid work model with teams primarily operating from the New York Metropolitan area, NY, and remotely via San Francisco/Bay Area, CA, and Seattle, WA. New York City office employees are required to work onsite three days a week on Tuesday, Wednesday, and Thursday. Employees based in Boston, DC, Chicago, Seattle, and San Francisco attend monthly Work Together Days within those cities.
What is the salary range for this role?
The base salary range for this role is $221,000 to $299,000 per year. Employees are also entitled to receive equity and benefits, with individual pay decisions based on qualifications, experience level, and skillset.
What kind of AI security challenges will this role handle?
The engineer will be responsible for understanding and managing the security risks that come with a growing use of LLMs and AI tooling, both in what the company builds and what is adopted internally. This includes handling risks like prompt injection, model misuse, or agentic tool abuse.