3 months ago
Base Salary
$232k - $290k/yr
Responsibilities
- Own the security posture of the Ripple Treasury solution and infrastructure from assessment through remediation and ongoing maturity improvement.
- Lead threat modeling and security architecture reviews across Treasury offerings.
- Define secure software development lifecycle guardrails, CI/CD integrations, and developer guidance.
- Drive Treasury cloud security architecture across Azure and AWS, including IAM, network segmentation, encryption, zero-trust controls, Kubernetes traffic policies, and DDoS and WAF strategy.
- Partner with GRC to address SOC 2, ISO 27001, and applicable financial regulatory obligations.
- Lead vulnerability discovery through security assessments, penetration testing, and bug bounty programs, including triage, prioritization, remediation, and validation.
- Build and scale a Security Champions model within Treasury Engineering.
- Influence architecture decisions through design reviews and architectural assessments.
- Mentor and develop Security Engineers through technical discussions, threat-model walkthroughs, and knowledge sharing.
- Translate emerging threats affecting FinTech, crypto, and enterprise treasury systems into defensive improvements.
Requirements
- 10+ years of Security Engineering experience with hands-on Product Security and Infrastructure Security work.
- Expertise in threat modeling using STRIDE or equivalent, security architecture review, OWASP Top 10, API security, authentication and authorization design, and secure SDLC development.
- Deep experience securing Azure, AWS, and/or GCP environments, including IAM, network security, secrets management, container and Kubernetes security, and infrastructure-as-code security.
- Hands-on experience with static analysis, dynamic analysis, software composition analysis, secrets scanning, container scanning, and CI/CD pipeline security integration.
- Strong software engineering skills in Python, Go, or equivalent for building security tooling and automating controls.
- Experience with cryptographic principles and key management, including HSMs, MPC, PKI, and key rotation.
- FinTech, crypto, blockchain, or other high-stakes financial-environment experience is preferred.
- A practitioner-oriented approach involving threat modeling, architecture review, code review, and security tooling development.
Benefits
- Professional development budget
- Flexible in-office collaboration, with managers and teams deciding which 10+ days per month employees come in
- Team offsites, team bonding activities, happy hours, and other events
- Bonuses and equity
- Healthcare, retirement, family-forming, and family-support benefits
- Employee giving match
- Mobile phone stipend
- R&R days, vacation policy, parental leave, and family-planning benefits
- Wellness reimbursement and weekly onsite and virtual programming
- Catered lunches, stocked kitchens, snacks, beverages, and events
Categories
About Ripple
Ripple builds enterprise blockchain-based payments, treasury, and crypto liquidity products for banks, payment providers, businesses, and governments. It licenses software and provides network services that power cross-border transfers (including On-Demand Liquidity using XRP) and offers a CBDC platform for central banks. Founded in 2012 and headquartered in San Francisco, Ripple serves over 300 customers across more than 40 countries.