Detection & Response, Lead

About the role

This role is part of Ramp's growing security team and focuses on driving security detection and response initiatives across Ramp. The position involves working in-person at our NYC HQ at least 2 days/week.

Responsibilities

• Respond and assist with security requests and incidents submitted by Ramp team members
• Review logging, alerting, and audit sources to identify potential security incidents and perform initial triage on identified incidents
• Contribute to the creation, upkeep, and tuning of runbooks and security alerts to effectively handle, triage, and improve security alerts
• Work closely with the Ramp Security Engineers to improve security alerting and automated remediation
• Utilize log ingestion platform for security analytics and identification of tactics, techniques and patterns of attackers
• Design and implement automation to detect and respond to threats

Requirements

• 3-4 years of information technology experience or the equivalent combination of education, technical training, or work experience
• Working experience in information security, especially on a Computer/Security Incident Response Team (C/SIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)
• Experience with query-based log management solutions (ELK, Datadog, Panther, etc)
• Strong deductive reasoning and critical thinking skills
• Able to communicate complex security issues to peers and management in a clear and effective manner
• Strong written communication skills and the ability to succinctly document technical details

Qualifications

• Prior experience working with government entities or in a highly regulated environment
• Security Certifications such as CompTIA Security+, Network+
• Experience with workflow automation tooling (Tines, Swimlane, etc.)

Skills

• Query-based log management solutions (ELK, Datadog, Panther, etc)
• Strong deductive reasoning and critical thinking skills
• Able to communicate complex security issues to peers and management in a clear and effective manner
• Strong written communication skills and the ability to succinctly document technical details

Benefits

• Full-time Ramp Employees (Global)
• Flexible PTO
• Unlimited AI token usage
• Centralized home-office equipment ordering
• Health and wellness stipend
• Budget for intra-office travel
• Weekly coffee stipend
• United States: 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
• One Medical annual membership
• Fertility HRA (up to $10,000 per year)
• Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
• Pet insurance
• In-office perks: lunch, snacks, drinks, and more
• Relocation support to NYC or SF (as needed)
• Canada: Group medical, dental, and vision coverage through Sun Life
• Life, AD&D, and disability coverage
• Fertility drug coverage (up to $4,000 lifetime)
• Group Retirement Plan with employer match (RRSP + DPSP)
• Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
• UK: Private medical insurance through Freedom Elite
• eMed x Livi Virtual GP and at-home care
• Penfold Workplace pension with salary sacrifice option
• Additional parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay