Maven Clinic
Staff Security Engineer, Detection & Response
New York, NY; Remote, US (Hub cities) · Staff+ · Full-time
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Read production code when needed to understand what's actually happening.
- When you're not investigating, hunt for bugs in our codebase and weaknesses in our SDLC where problems can slip past existing controls.
- Close gaps in logging and visibility so the tooling has the right data to work with.
Responsibilities
- Lead investigations hands-on. When an incident or suspicious finding comes up, you pull the logs, build the narrative of what happened, and advise business and engineering leaders on next steps.
- Propose and implement fixes yourself, or manage the resolution with the right teams, whether that's a specific code fix, a broader process or control change.
- Partner with our Product Security Engineer on golden paths when a weakness points to a systemic gap.
- Own and tune the detection logic running through 7AI, validating its investigations and escalations and setting the criteria for what triggers an alert.
- Help us understand and manage the security risks that come with our growing use of LLMs and AI tooling, both in what we build and what we adopt internally.
- You'll own our Incident Detection and Response program, including threat modeling our systems and codebase and directing the investigation when something does happen.
Requirements
- 6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM engineering ownership.
- Hands-on experience with AI-assisted security operations tooling, such as AI SOC platforms, LLM-based triage, or agentic escalation systems.
- Interest or experience in securing AI and LLM-powered systems, including risks like prompt injection, model misuse, or agentic tool abuse.
- Experience with container or image security and the patching lifecycle.
- If you do not have experience in all of the areas detailed above, we hope that you will share your unique background with us in your application and how it can be additive to our teams.
Nice to have
- Strongly preferred:
Compensation
- The base salary range for this role is $221,000 - $299,000 per year.
Benefits
- Whole-self care through wellness partnerships
- 16 weeks 100% paid parental leave and new parent stipend (for Mavens who've been with us for 1 year+)
- Annual professional development stipend and access to a personal career coach through Maven for Mavens
- 401K matching for US-based employees, with immediate vesting
- Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics.
- These benefits are applicable to Maven Clinic Co., US-based, full-time employees only.
- 1099/Contract Providers are ineligible for these benefits.
- Fortune Best Workplaces in Health Care (2024)
Company info
- AI is a growing part of that surface, and as our reliance on LLMs, AI-generated code, and agents expands, you'll be responsible for understanding and managing the risk that comes with it.
- At Maven we believe that a diverse set of backgrounds and experiences enrich our teams and allow us to achieve above and beyond our goals.
Equal opportunity
- Maven is an affirmative action and
- equal opportunity employer.
- equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities.
This listing is sourced directly from Maven Clinic's careers page and normalized into a canonical job model.