Staff Security Engineer, Detection & Response

Maven Clinic is scaling how security detection and response works as it grows its platform and internal engineering practices. This role owns Incident Detection and Response end-to-end, combining hands-on investigation, detection engineering, and SDLC hardening while managing the evolving security risks introduced by AI, LLMs, AI-generated code, and agents.

In a hybrid setup based in San Francisco, CA, you will lead investigations, validate alerting behavior, and help ensure security tooling has the logging and visibility it needs to perform reliably across modern production systems.

Role overview

• Own Maven Clinic’s Incident Detection and Response program, including threat modeling, leading investigations, proactive hunting and hardening of the SDLC, and building and validating detection engineering.
• Manage security risk as AI, LLMs, AI-generated code, and agents expand across the codebase and internal adoption.

Responsibilities

• Lead investigations hands-on: pull logs, build the narrative of what occurred, and advise business and engineering leaders on next steps.
• Read production code when needed to understand what is actually happening.
• Hunt for bugs in the codebase and weaknesses in the SDLC where problems can bypass existing controls.
• Propose and implement fixes personally, or manage resolution with the right teams, including code fixes and broader process or control changes.
• Partner with the Product Security Engineer on golden paths when a weakness indicates a systemic gap.
• Own and tune detection logic running through 7AI, validating investigations and escalations, and setting alert criteria.
• Close gaps in logging and visibility so tooling has the right data to operate effectively.
• Help manage security risks related to growing use of LLMs and AI tooling, both in what the team builds and what is adopted internally.

Requirements

• 6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM engineering ownership.
• Ability to read production code across multiple languages and stacks well enough to judge whether a finding is truly exploitable.
• Experience building threat models for codebases, including attack surface, trust boundaries, and data flow reasoning.
• A track record of identifying and fixing systemic weaknesses surfaced through incidents or proactive review.
• Strong communication skills, with enough credibility to direct an investigation and influence peers informally.

Technologies

• 7AI
• LLMs
• SIEM

Strongly preferred

• Hands-on experience with AI-assisted security operations tooling such as AI SOC platforms, LLM-based triage, or agentic escalation systems.
• Interest or experience securing AI and LLM-powered systems, including risks like prompt injection, model misuse, or agentic tool abuse.
• Prior exposure to golden-path or secure-by-default infrastructure initiatives (even in a supporting role).
• Experience with container or image security and the patching lifecycle.
• A relevant certification such as GCIH, GCFA, GCDA, OSCP, or CISSP.

Compensation

• Base salary range: USD 221,000 - 299,000 per year.
• You will also be entitled to receive equity and benefits.

Benefits

• Employer-covered health, dental, and insurance plan options
• Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics
• Whole-self care through wellness partnerships
• Hybrid work, in office meals, and work together days
• 16 weeks 100% paid parental leave and new parent stipend (for Mavens who’ve been with us for 1 year+)
• Annual professional development stipend and access to a personal career coach through Maven for Mavens
• 401K matching for US-based employees, with immediate vesting

Work model and location

• Maven embraces a flexible hybrid work model.
• Teams primarily operate from the New York Metropolitan area, NY, and remotely via San Francisco/Bay Area, CA, Seattle, WA.
• For New York City office: onsite three days a week (Tuesday, Wednesday, Thursday).
• For Boston, DC, Chicago, Seattle, and San Francisco: monthly Work Together Days within these cities.
• Location for this role: San Francisco, CA (hybrid).