Senior Security Engineer Lead, Cloud & AppSec

Hidden Road; New York (NY); On-site; USD 224,000 - 300,000; Full time

Benefits offered by this job

Competitive salary

Bonuses and equity

Retirement benefits

Healthcare benefits (physical & mental

Employee giving match

Mobile phone stipend

Generous vacation policy

Catered lunches

Job summary

Ripple is seeking a Senior Staff Security Engineer in New York to lead security across Treasury product and infrastructure, shaping threat models, secure SDLC, and cloud security architecture.

This role partners with Treasury Product and Engineering to drive vulnerability management, architecture reviews, and security tooling, mentoring engineers while staying ahead of fintech threats.

Qualifications

• 10+ years of Security Engineering experience in product and infrastructure security.
• Expert-level threat modeling using STRIDE or equivalent.
• Deep security of cloud environments (Azure, AWS, and/or GCP), including IAM and network security.
• Hands-on DevSecOps tooling: static/dynamic analysis, SBOM, secrets scanning, container scanning, and CI/CD security.
• Strong Python or Go programming skills and ability to build security tooling.
• Knowledge of cryptographic principles and key management, including HSMs.
• Background in FinTech, crypto, blockchain, or high-stakes financial environments.
• Practitioner approach: write threat models, review architecture, read code, and build tooling.

Responsibilities

• Serve as the dedicated Security Engineering partner for Ripple Treasury, owning security posture from assessment through remediation.
• Lead threat modeling and security architecture reviews across Treasury offerings.
• Own the secure SDLC for the Treasury surface area and define security guardrails and CI/CD guidance.
• Drive cloud security architecture for Treasury across Azure and AWS, including IAM, network segmentation, encryption, and zero trust.
• Partner with GRC to ensure compliance with SOC 2, ISO 27001, and related financial regulations.
• Own vulnerability discovery via assessments, pentests, and bug bounties; drive triage, remediation, and validation.
• Build and scale a Security Champions model within Treasury Engineering.
• Mentor and develop Security Engineers through threat modeling and design reviews.
• Stay ahead of threats in FinTech/crypto and translate into concrete defensive improvements.

Job description

Ripple is seeking a Senior Staff Security Engineer in New York to lead security across Treasury product and infrastructure, shaping threat models, secure SDLC, and cloud security architecture.

This role partners with Treasury Product and Engineering to drive vulnerability management, architecture reviews, and security tooling, mentoring engineers while staying ahead of fintech threats.