3 months ago
Base Salary
$232k - $290k/yr
Responsibilities
- Drive Ripple’s AI Security technical strategy and roadmap across AI systems, agentic workflows, and the AI development lifecycle.
- Design and implement controls for LLM-integrated and agentic systems, including sandboxing, identity and permission scoping, runtime monitoring, and containment.
- Own security guardrails, AI provenance standards, dual-review requirements, and audit trail controls for AI-assisted development.
- Lead security reviews and risk assessments for production AI integrations, including LLM APIs, SaaS copilots, AI code editors, agentic workflows, third-party MCP servers, and vendor-embedded AI.
- Build and scale Shadow AI detection, support adoption of the AI acceptable use policy, and keep AI workflows within Ripple’s auditable perimeter.
- Advise teams on agentic AI risks such as MCP server security, tool poisoning, orchestration-layer prompt injection, and excessive agency.
- Shape Ripple’s external AI security posture through industry frameworks, regulatory engagement, and published security research.
Requirements
- 10+ years of Security Engineering experience with depth in at least two domains such as Product Security, Cloud Security, or Security Operations.
- Meaningful hands-on exposure to AI or ML security and a strong understanding of prompt injection, jailbreaks, data poisoning, model extraction, RAG manipulation, tool poisoning, excessive agency, and MCP server vulnerabilities.
- Experience securing agentic AI systems through sandboxing, permission scoping, human-in-the-loop design, or runtime monitoring.
- Fluency with cloud security on AWS, GCP, or Azure; CI/CD pipeline security; container and Kubernetes security; IAM; and API security.
- Experience with threat modeling approaches such as STRIDE, MITRE ATLAS, or OWASP LLM Top 10.
- FinTech, crypto, or highly regulated industry experience and familiarity with NYDFS, MAS, DORA, or SOC 2 are preferred.
- Ability to work across Engineering, Product, and Security, influence technical direction without direct authority, and operate effectively in ambiguous environments.
Benefits
- Professional development budget.
- Flexible in-office collaboration, with managers and teams deciding which 10+ days per month employees come in.
- Team offsites, team bonding activities, happy hours, and other events.
- Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support.
- Employee giving match and mobile phone stipend.
- R&R days, generous vacation, wellness reimbursement, and weekly onsite and virtual programming.
- Industry-leading parental leave and family planning benefits.
- Catered lunches, fully stocked kitchens, premium snacks and beverages, and fun events.
Tech Stack
Categories
About Ripple
Using proven crypto and blockchain technology honed over a decade, Ripple’s enterprise-grade solutions are faster, more transparent, and more cost-effective than traditional financial services. Our customers use these solutions to source crypto, facilitate instant payments, empower their treasury, engage new audiences, lower capital requirements, and drive new revenue. Founded in 2012, Ripple's vision is to enable a world where value moves as seamlessly as information flows today—an Internet of Value. Ripple is the only enterprise blockchain company today with products in commercial use. Ripple’s global payments network includes over 300 customers across 40+ countries and six continents.