3 months ago
Base Salary
$220k - $275k/yr
Responsibilities
- Own Ripple Treasury's security posture from assessment through remediation and ongoing maturity improvement.
- Lead threat modeling and security architecture reviews across Treasury offerings.
- Own secure software development lifecycle guardrails, CI/CD integrations, and developer security guidance.
- Drive Treasury cloud security architecture across Azure and AWS, including IAM, network segmentation, encryption, zero trust controls, Kubernetes traffic policies, DDoS protection, and WAF strategy.
- Partner with GRC to address SOC 2, ISO 27001, and applicable financial regulatory obligations.
- Lead vulnerability discovery through security assessments, penetration testing, and bug bounty programs, including triage, prioritization, remediation, and validation.
- Build and scale a Security Champions model within Treasury Engineering.
- Influence engineering architecture decisions through design reviews and architectural assessments.
- Mentor and develop Security Engineers through technical discussions, threat-model walkthroughs, and knowledge sharing.
- Monitor the fintech, crypto, and enterprise treasury threat landscape and translate emerging attacks into defensive improvements.
Requirements
- 10+ years of Security Engineering experience, including hands-on Product Security and Infrastructure Security work.
- Expertise in threat modeling using STRIDE or equivalent, security architecture review, OWASP Top 10, API security, authentication and authorization design, and secure SDLC development.
- Deep experience securing cloud environments across Azure, AWS, and/or GCP, including IAM architecture, network security, secrets management, container and Kubernetes security, and infrastructure-as-code security.
- Hands-on experience building and operating DevSecOps tooling for static analysis, dynamic analysis, software composition analysis, secrets scanning, container scanning, and CI/CD pipeline security integration.
- Strong software engineering skills in Python, Go, or an equivalent language, with the ability to build security tooling and automate controls.
- Experience with cryptographic principles and key management, including HSMs, MPC, PKI, and key rotation.
- FinTech, crypto, blockchain, or high-stakes financial environment experience is a strong plus.
- A hands-on practitioner's approach involving threat models, architecture reviews, code reading, and tooling development.
Benefits
- Professional development budget
- Flexible in-office collaboration with managers and teams deciding which 10+ days per month to come in
- Team offsites, team bonding activities, and happy hours
- Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support
- Employee giving match
- Mobile phone stipend
- R&R days, generous vacation policy, and parental leave policies
- Family planning benefits
- Generous wellness reimbursement and weekly onsite and virtual programming
- Catered lunches, fully stocked kitchens, premium snacks and beverages, and company events
- Benefits listed are for full-time employees
Categories
About Ripple
Ripple builds enterprise blockchain-based payments, treasury, and crypto liquidity products for banks, payment providers, businesses, and governments. It licenses software and provides network services that power cross-border transfers (including On-Demand Liquidity using XRP) and offers a CBDC platform for central banks. Founded in 2012 and headquartered in San Francisco, Ripple serves over 300 customers across more than 40 countries.