Ripple
Senior Staff Security Engineer, Ripple Treasury
Chicago, Illinois, United States · Staff+ · Full-time
Sponsorship not specified$220k-$275kDetected 1 day ago
PythonGoAWSGCPAzureCloud PlatformsKubernetesCI/CDRESTCybersecurityPenetration TestingNetwork SecurityComplianceFirewallZero TrustLeadershipCollaboration
About the role
- It's big, it's bold, and we're already doing it.
- And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs.
- THE WORK: As a Senior Staff Security Engineer, you will be one of Ripple's most senior technical security practitioners, operating at the intersection of application security, cloud infrastructure security, and secure software delivery.
Responsibilities
- Serve as the dedicated Security Engineering partner for Ripple Treasury BU, owning the security posture of the Treasury solution and infrastructure environment from assessment through remediation and ongoing maturity improvement.
- Lead threat modeling and security architecture reviews across Treasury offerings.
- Own the secure software development lifecycle for your product surface area, defining security guardrails, CI/CD integrations, and developer guidance that make secure by default a practical reality.
- Drive the cloud security architecture for Treasury across Azure and AWS, including IAM, network segmentation, encryption, zero trust controls, Kubernetes traffic policies, and DDoS and WAF strategy, ensuring full alignment with Ripple's infrastructure standards as Treasury integrates.
- Partner with GRC to ensure Treasury meets its compliance obligations across SOC 2, ISO 27001, and applicable financial regulatory frameworks as the BU integrates into Ripple's governance program.
- Own vulnerability discovery via security assessments, penetration testing and bug bounty, driving findings through triage, prioritization, remediation, and validation with a bias toward automation and developer self-service.
- Build and scale a Security Champions model within Treasury Engineering, embedding security advocates who extend the Security Engineering team's reach at scale.
- Influence engineering architecture decisions at the senior level, participating in design reviews and architectural assessments with the standing to raise security concerns that get acted on.
- Mentor and develop Security Engineers, raising the technical bar through threat model walkthroughs, design discussions, and structured knowledge sharing.
- Expert-level product security skills including threat modeling using STRIDE or equivalent, security architecture review, OWASP Top 10 and beyond, API security, authentication and authorization design, and secure SDLC development.
Nice to have
- 10+ years of Security Engineering experience, including hands-on work in Product Security and Infrastructure Security.
- Deep expertise in securing cloud environments across Azure, AWS, and/or GCP, covering IAM architecture, network security, secrets management, container and Kubernetes security, and infrastructure as code security.
- Experience with cryptographic principles and key management, including HSMs, MPC, PKI, and key rotation, with an understanding of the consequences of key management failure in financial infrastructure.
- Background in FinTech, crypto, blockchain, or high-stakes financial environments is a strong plus, particularly where security failures have direct customer or systemic financial impact.
- A practitioner's approach.
Compensation
- For positions that will be based in IL, the annual salary range for this position is below.
- IL Annual Base Salary Range
- $220,000 - $275,000 USD
Benefits
- A learning environment where you can dive deep into the latest technologies and make an impact.
- A professional development budget to support other modes of learning.
- Competitive salary, bonuses, and equity
- Mobile phone stipend
- Generous vacation policy - work with your manager to take time off when you need it
- Industry-leading parental leave policies.
- Family planning benefits.
- This range does not include equity or additional compensation, such as bonuses or commissions.
- Generous wellness reimbursement and weekly onsite & virtual programming
Company info
- Do Your Best Work
- A learning environment where you can dive deep into the latest technologies and make an impact. A professional development budget to support other modes of learning.
- Thrive in an environment where no matter what race, ethnicity, gender, origin, or culture they identify with, every employee is a respected, valued, and empowered part of the team.
- In-office collaboration for moments that matter is important to our culture, and we give managers and teams the flexibility to decide which 10+ days a month they come in.
- Bi-weekly all-company meeting - business updates and ask me anything style discussion with our Leadership Team
- We come together for moments that matter which include team offsites, team bonding activities, happy hours and more!
- Take Control of Your Finances
- Competitive benefits that cover physical and mental healthcare, retirement, family forming, and family support
- Employee giving match
- Take Care of Yourself
- R&R days so you can rest and recharge
Equal opportunity
- Equal Opportunity Employer.
Visa & Work Authorization
- plicants because of race, color, religion, gender identity, sex, sexual identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, militar
This listing is sourced directly from Ripple's careers page and normalized into a canonical job model.