4 months ago
Base Salary
$232k - $290k/yr
Responsibilities
- Drive Ripple’s AI Security technical strategy and roadmap across AI systems, agentic workflows, and the AI development lifecycle.
- Design and implement controls for LLM-integrated and agentic systems, including sandboxing, identity and permission scoping, runtime monitoring, and containment.
- Own security guardrails, AI provenance standards, dual-review requirements, and audit trail controls for AI-assisted development.
- Lead security reviews and risk assessments for production AI integrations, including LLM APIs, SaaS copilots, AI code editors, agentic workflows, third-party MCP servers, and vendor-embedded AI.
- Build and scale Shadow AI detection, support adoption of the AI acceptable use policy, and keep AI workflows within Ripple’s auditable perimeter.
- Advise teams on agentic AI risks such as MCP server security, tool poisoning, orchestration-layer prompt injection, and excessive agency.
- Shape Ripple’s external AI security posture through industry frameworks, regulatory engagement, and published security research.
Requirements
- 10+ years of Security Engineering experience with depth in at least two domains such as Product Security, Cloud Security, or Security Operations.
- Meaningful hands-on exposure to AI or ML security and a strong understanding of prompt injection, jailbreaks, data poisoning, model extraction, RAG manipulation, tool poisoning, excessive agency, and MCP server vulnerabilities.
- Experience securing agentic AI systems through sandboxing, permission scoping, human-in-the-loop design, or runtime monitoring.
- Fluency with cloud security on AWS, GCP, or Azure; CI/CD pipeline security; container and Kubernetes security; IAM; and API security.
- Experience with threat modeling approaches such as STRIDE, MITRE ATLAS, or OWASP LLM Top 10.
- FinTech, crypto, or highly regulated industry experience and familiarity with NYDFS, MAS, DORA, or SOC 2 are preferred.
- Ability to work across Engineering, Product, and Security, influence technical direction without direct authority, and operate effectively in ambiguous environments.
Benefits
- Professional development budget.
- Flexible in-office collaboration, with managers and teams deciding which 10+ days per month employees come in.
- Team offsites, team bonding activities, happy hours, and other events.
- Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support.
- Employee giving match and mobile phone stipend.
- R&R days, generous vacation, wellness reimbursement, and weekly onsite and virtual programming.
- Industry-leading parental leave and family planning benefits.
- Catered lunches, fully stocked kitchens, premium snacks and beverages, and fun events.
Tech Stack
Categories
About Ripple
Ripple builds enterprise blockchain-based payments, treasury, and crypto liquidity products for banks, payment providers, businesses, and governments. It licenses software and provides network services that power cross-border transfers (including On-Demand Liquidity using XRP) and offers a CBDC platform for central banks. Founded in 2012 and headquartered in San Francisco, Ripple serves over 300 customers across more than 40 countries.