Senior Security Engineer – Treasury Cloud, DevSecOps, Equity

Hidden Road; Chicago (IL); On-site; USD 220,000 - 300,000; Full time

Benefits offered by this job

Bonuses

Equity

Healthcare

Retirement plan

Job summary

Ripple is seeking a Senior Staff Security Engineer to lead security for the Treasury domain, driving secure design, threat modeling, and security architecture across cloud environments. You will be the dedicated security engineering partner for Treasury, guiding vulnerability management and secure by default practices.

You will mentor engineers, advance the secure SDLC, and align with governance to meet SOC 2 and ISO 27001 standards.

Qualifications

• 10+ years of security engineering experience with product and infrastructure security.
• Hands-on expertise in threat modeling (STRIDE) and security architecture reviews.
• Deep cloud security knowledge across Azure, AWS and/or GCP.
• Experience with DevSecOps tooling and secure SDLC practices.
• Strong programming skills in Python or Go; building security tooling.
• Knowledge of cryptographic key management and financial infrastructure security.
• FinTech/crypto exposure is a strong plus.

Responsibilities

• Serve as the dedicated Security Engineering partner for Treasury, owning security posture end-to-end.
• Lead threat modeling and security reviews across Treasury offerings.
• Own secure SDLC and define guardrails, CI/CD integrations, and developer guidance.
• Drive cloud security architecture across Azure and AWS with IAM, segmentation, and zero-trust controls.
• Coordinate with GRC to meet SOC 2, ISO 27001 and applicable regulations.
• Own vulnerability discovery and remediation, with automation and self-service emphasis.
• Develop Security Champions model within Treasury Engineering.
• Influence senior engineering architecture decisions and design reviews.
• Mentor Security Engineers through threat modeling and knowledge sharing.
• Stay ahead of FinTech threat trends and translate into defensive improvements.

Skills

Threat modeling

Security architecture

API security

AuthN/AuthZ design

Secure SDLC

DevSecOps tooling

Python/Go programming

Cloud security (Azure/AWS/GCP)

Kubernetes security

STRIDE threat modeling

Tools

Static analysis tools

Dynamic analysis tools

Software Composition Analysis

Secrets scanning

Container scanning

CI/CD security tooling

Job description

Ripple is seeking a Senior Staff Security Engineer to lead security for the Treasury domain, driving secure design, threat modeling, and security architecture across cloud environments. You will be the dedicated security engineering partner for Treasury, guiding vulnerability management and secure by default practices.

You will mentor engineers, advance the secure SDLC, and align with governance to meet SOC 2 and ISO 27001 standards.