Maven Clinic: Staff Security Engineer, Detection & Response — New York, NY; Remote, US (Hub cities)

About Maven Clinic

Maven Clinic provides virtual women's and family healthcare. Its employer introduction describes programmes spanning fertility and family building, maternity and newborn care, parenting and paediatrics, and menopause and midlife. It serves members through employer and health-plan programmes as well as a consumer platform. The described care model brings virtual access together with support around different life stages, while care-coordination roles help members navigate services and turn clinical recommendations into practical next steps.

The position and its setting

Maven Clinic lists Staff Security Engineer, Detection & Response in New York, NY; Remote, US (Hub cities), under reference 8845343002. The details below separate the work described by the employer from essential conditions, preferred experience and practical preparation advice.

• Department: Core Engineering
• Employer listing date: 25 September 2026

Responsibilities and work described

• You'll own our Incident Detection and Response program, including threat modeling our systems and codebase and directing the investigation when something does happen
• You'll join a team that includes an AppSec-focused engineer and an infrastructure-focused engineer, and you'll guide technical direction and judgment calls
• You'll spend most of your time finding bugs in our code and gaps in our SDLC before they become incidents, then building and implementing or project managing the fixes yourself
• AI is a growing part of that surface, and as our reliance on LLMs, AI-generated code, and agents expands, you'll be responsible for understanding and managing the risk that comes with it

Essential requirements and candidate background

• Required:
• 6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM engineering ownership
• Comfortable reading production code across multiple languages and stacks well enough to judge whether a finding is actually exploitable
• Experience building threat models of codebases, reasoning about attack surface, trust boundaries, and data flow well enough to anticipate where problems will emerge
• A track record of finding and fixing systemic weaknesses, whether they surfaced through an incident or through your own proactive review
• Communication skills, with enough credibility to direct an investigation and influence peers informally

Preferred experience and additional strengths

• Experience: AI-assisted security operations tooling, such as AI SOC platforms, LLM-based triage, or agentic escalation systems
• Interest or experience in securing AI and LLM-powered systems, including risks like prompt injection, model misuse, or agentic tool abuse
• Prior exposure to golden-path or secure-by-default infrastructure initiatives, even in a supporting role
• Experience: container or image security and the patching lifecycle
• A relevant certification such as GCIH, GCFA, GCDA, OSCP, or CISSP

Location, schedule and contract conditions

For this overseas or regional listing, confirm work authorisation and any location restrictions with the employer. The location does not establish visa sponsorship or permission to work remotely from India.

• The base salary range for this role is $221,000 - $299,000 per year
• Also be entitled to receive equity and benefits
• Individual pay decisions are based on a number of factors, including qualifications for the role, experience level, and skillset
• Maven embraces a flexible hybrid work model
• Our teams primarily operate from the New York Metropolitan area, NY, and remotely via San Francisco/Bay Area, CA, Seattle, WA
• For those in our New York City office, we encourage in-person collaboration by requiring team members to work onsite three days a week (Tuesday, Wednesday, Thursday)
• For those based in Boston, DC, Chicago, Seattle, and San Francisco, we encourage in-person collaboration by requiring team members to attend monthly Work Together Days within these cities
• This policy aims to balance remote work flexibility with the benefits of face-to-face interaction
• Work arrangement: Remote
• Advertised location: New York, NY; Remote, US (Hub cities)

Benefits mentioned by the employer

• Our benefits are designed to support your health, well-being and career development, helping you thrive both personally and professionally
• We remain focused on providing a competitive benefits package for our employees
• On top of standards such as employer-covered health, dental, and insurance plan options, we offer an inclusive approach to benefits:
• Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics
• Whole-self care through wellness partnerships
• Hybrid work, in office meals, and work together days
• 16 weeks 100% paid parental leave and new parent stipend (for Mavens who've been with us for 1 year+)
• Annual professional development stipend and access to a personal career coach through Maven for Mavens
• 401K matching for US-based employees, with immediate vesting
• These benefits are applicable to Maven Clinic Co., US-based, full-time employees only. 1099/Contract Providers are ineligible for these benefits

Pay and application dates

A verified salary figure is not established in this article. An online estimate for another Staff Security Engineer, Detection & Response vacancy is not an offer for reference 8845343002; use the employer’s own pay disclosure and recruitment communication.

A closing date is not confirmed in this article. Check the current employer page before submitting: an undated posting can change or be withdrawn.

How to apply to Maven Clinic

Applications follow the official employer page linked below.

Open the official Maven Clinic posting below and match the title and reference 8845343002.

Compare your qualifications and experience with the essential conditions for the New York, NY; Remote, US (Hub cities) position, then read the preferred criteria separately.

Prepare an accurate CV and the supporting items requested in that employer’s application. Provide only information and documents you are authorised to share.

Use the employer’s application option, complete the required fields and review the submission. Retain the acknowledgement when one is provided. Job Alerts World does not receive the application.

Practical preparation: AI

An AI-related example should make the task and evaluation explicit. Explain the inputs, the system’s intended output and how you checked errors, usefulness or reliability, rather than relying on the model name alone.

Relevant skills

• AI/ML
• LLMs
• AI
• GLP
• insurance
• investment
• communication
• partnership development
• security operations
• behavioural health