Senior Staff Security Engineer, Ripple Treasury
Ripple provides payments, custody and stablecoin solutions that help financial institutions integrate blockchain and digital assets.
Funding history
Investors
Projects
About Ripple
Ripple helps financial institutions transform global payments by providing blockchain-powered infrastructure for cross-border payments, digital asset custody, and stablecoin solutions. With it, users can enable instant settlements, reduce costs, and access new markets. The company was originally founded as OpenCoin in 2012 and rebranded to Ripple in 2015.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will be one of Ripple's most senior technical security practitioners, working across application security, cloud infrastructure security, and secure software delivery. You will partner with Ripple Treasury Product and Engineering teams to drive secure design, threat modeling, vulnerability management, cloud security architecture, compliance, and security engineering maturity.
Requirements
- 10+ years of Security Engineering experience, including Product Security and Infrastructure Security.
- Expertise in threat modeling, security architecture review, OWASP Top 10, API security, authentication, authorization, and secure SDLC development.
- Deep expertise securing cloud environments across Azure, AWS, and/or GCP, including IAM, network security, secrets management, containers, Kubernetes, and infrastructure as code.
- Hands-on experience building and operating DevSecOps tooling for static analysis, dynamic analysis, software composition analysis, secrets scanning, container scanning, and CI/CD security integration.
- Strong software engineering skills in Python, Go, or equivalent.
- Experience with cryptographic principles and key management, including HSMs, MPC, PKI, and key rotation.
- FinTech, crypto, blockchain, or high-stakes financial environment experience is a strong plus.
- Practitioner's approach with experience writing threat models, reviewing architecture, reading code, and building tooling.
Responsibilities
- Serve as the dedicated Security Engineering partner for Ripple Treasury, owning the security posture of the Treasury solution and infrastructure environment.
- Lead threat modeling and security architecture reviews across Treasury offerings.
- Own the secure software development lifecycle, including security guardrails, CI/CD integrations, and developer guidance.
- Drive cloud security architecture across Azure and AWS, including IAM, network segmentation, encryption, zero trust, Kubernetes, DDoS, and WAF strategy.
- Partner with GRC to meet SOC 2, ISO 27001, and applicable financial regulatory obligations.
- Own vulnerability discovery through security assessments, penetration testing, and bug bounty programs.
- Build and scale a Security Champions model within Treasury Engineering.
- Influence engineering architecture decisions through design reviews and architectural assessments.
- Mentor and develop Security Engineers through threat model walkthroughs, design discussions, and knowledge sharing.
- Track emerging threats affecting FinTech, crypto, and enterprise treasury systems and translate them into defensive improvements.
Benefits
- Professional development budget
- Flexible in-office collaboration schedule with a minimum of 10+ days per month
- Bi-weekly all-company meetings with leadership
- Team offsites, team bonding activities, and happy hours
- Competitive bonuses and equity
- Physical and mental healthcare, retirement, family-forming, and family-support benefits
- Employee giving match
- Mobile phone stipend
- R&R days
- Wellness reimbursement and weekly onsite and virtual programming
- Generous vacation policy
- Industry-leading parental leave
- Family planning benefits
- Catered lunches and stocked kitchens