Senior Security Engineer, Treasury Cloud & AppSec

Ripple; Chicago (IL); On-site; USD 220,000 - 300,000; Full time

Benefits offered by this job

Bonuses & equity

Comprehensive benefits

Flexible in-office days

Job summary

Ripple is seeking a Senior Staff Security Engineer to elevate security across product, infrastructure, and secure software delivery. You will partner with Treasury to drive threat modeling, cloud security architecture, and compliant design at scale.

You will mentor engineers, build security champions, and push automated security controls across Azure, AWS, and Kubernetes, ensuring robust, scalable defenses for FinTech and crypto platforms.

Qualifications

• 10+ years of Security Engineering, with hands-on Product and Infrastructure security experience.
• Expert-level threat modeling and security architecture reviews.
• Cloud security across Azure, AWS, and/or GCP with IAM, network and secrets management.
• Hands-on DevSecOps tooling including SCA/DAST, SCA, container scanning, and CI/CD security integrations.

Responsibilities

• Own the security posture for Ripple Treasury and its infrastructure from assessment through remediation and maturity improvement.
• Lead threat modeling and security architecture reviews for Treasury offerings.
• Define secure SDLC and CI/CD guardrails with developer guidance to enable secure-by-default practices.
• Drive cloud security architecture for Treasury across Azure and AWS, including IAM, network segmentation, encryption, and zero trust controls.
• Partner with GRC to ensure Treasury meets SOC 2, ISO 27001, and applicable financial regulatory requirements.
• Own vulnerability discovery via assessments, pentests, and bug bounty, prioritizing automated remediation.
• Build and scale a Security Champions model within Treasury Engineering.
• Influence senior engineering decisions with security considerations in design reviews.
• Mentor Security Engineers and raise the technical bar through threat modeling and knowledge sharing.
• Stay ahead of FinTech/crypto threat landscape and translate findings into concrete defenses.

Skills

Threat modeling

Security architecture

OWASP Top 10

API security

Authn/Authz design

Secure SDLC

Cloud security

IAM & network

Kubernetes security

DevSecOps tooling

Python/Go

Key management

FinTech security

Tools

Azure

AWS

GCP

Terraform

CI/CD tooling

Job description

Ripple is seeking a Senior Staff Security Engineer to elevate security across product, infrastructure, and secure software delivery. You will partner with Treasury to drive threat modeling, cloud security architecture, and compliant design at scale.

You will mentor engineers, build security champions, and push automated security controls across Azure, AWS, and Kubernetes, ensuring robust, scalable defenses for FinTech and crypto platforms.