2 months ago
London, United KingdomStaff+
Responsibilities
- Drive Ripple’s AI Security technical strategy and roadmap across AI systems, agentic workflows, and the AI development lifecycle.
- Design and implement security controls for LLM-integrated and agentic systems, including sandboxing, identity and permission scoping, runtime monitoring, and containment.
- Own security guardrails, provenance standards, dual-review requirements, and audit trail controls for AI-assisted development.
- Lead security reviews and risk assessments for LLM APIs, SaaS copilots, AI code editors, agentic workflows, third-party MCP servers, and vendor-embedded AI.
- Build and scale shadow AI detection, support enforcement of the AI acceptable use policy, and maintain an auditable perimeter for AI workflows.
- Advise Ripple on agentic AI threats including MCP server security, tool poisoning, prompt injection, and excessive agency.
- Contribute to industry frameworks, regulatory engagement, and published research on responsible AI security.
Requirements
- 10+ years of Security Engineering experience with depth in at least two areas such as Product Security, Cloud Security, or Security Operations.
- Meaningful hands-on experience with AI or ML security and a strong understanding of LLM and agentic AI threats.
- Experience securing agentic AI systems through sandboxing, permission scoping, human-in-the-loop design, or runtime monitoring.
- Fluency in cloud security on AWS, GCP, or Azure; CI/CD pipeline security; container and Kubernetes security; IAM; and API security.
- Experience with threat modeling approaches such as STRIDE, MITRE ATLAS, or OWASP LLM Top 10.
- Strong cross-functional influence and ability to establish structure for ambiguous problems spanning Engineering, Product, and Security.
- Experience in FinTech, crypto, or regulated environments and familiarity with NYDFS, MAS, DORA, or SOC 2 is preferred.
- A builder’s mentality and comfort developing security practices in an emerging area are preferred.
Benefits
- Professional development budget and opportunities to work with experienced industry leaders in a fast-paced startup environment.
- Flexible in-office collaboration with managers and teams deciding which 10+ days per month employees attend in person.
- Team offsites, team bonding activities, happy hours, and bi-weekly all-company meetings.
- Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support.
- Employee giving match and mobile phone stipend.
- R&R days, generous vacation, wellness reimbursement, and weekly onsite and virtual wellness programming.
- Industry-leading parental leave and family planning benefits.
- Catered lunches, stocked kitchens, premium snacks and beverages, and company events.
- Benefits listed are for full-time employees.
Tech Stack
Categories
About Ripple
Ripple builds enterprise blockchain-based payments, treasury, and crypto liquidity products for banks, payment providers, businesses, and governments. It licenses software and provides network services that power cross-border transfers (including On-Demand Liquidity using XRP) and offers a CBDC platform for central banks. Founded in 2012 and headquartered in San Francisco, Ripple serves over 300 customers across more than 40 countries.