Senior Security Engineer, Treasury — Cloud Security & Threat Modeling

Ripple; New York (NY); On-site; USD 224,000 - 300,000; Full time

Benefits offered by this job

Competitive salary and equity

Comprehensive benefits

Employee giving program

R&R days and wellness reimbursement

Generous vacation and parental leave

Job summary

Ripple is seeking a Senior Staff Security Engineer to lead the security posture of the Treasury platform in New York. You will own threat modeling, secure architecture, and cloud security across Azure and AWS, guiding secure-by-default design and CI/CD integration.

You will collaborate with Treasury Product and Engineering, drive vulnerability management, and mentor security engineers, while staying ahead of FinTech threat landscapes. Competitive base salary and equity.

Qualifications

• Ten+ years in Security Engineering with Product Security and Infrastructure Security.
• Expert-level product security skills including threat modeling, architecture reviews, OWASP Top 10, API security and secure SDLC.
• Deep cloud security expertise across Azure, AWS, and/or GCP (IAM, network security, secrets management, Kubernetes).
• Hands-on DevSecOps tooling experience (SAST/DAST, SCA, container scanning, CI/CD integration).
• Strong software engineering in Python/Go with security tooling and automation.
• Cryptographic practice and key management knowledge (HSMs, MPC, PKI, key rotation).
• FinTech/crypto/security background is a strong plus.

Responsibilities

• Own security posture for Ripple Treasury from assessment to remediation and maturity.
• Lead threat modeling and security architecture reviews across Treasury offerings.
• Define secure SDLC guardrails and CI/CD guidance for Treasury surface area.
• Drive cloud security architecture across Treasury in Azure/AWS with IAM, segmentation, and zero trust.
• Coordinate with GRC for SOC 2, ISO 27001 and regulatory alignment.
• Oversee vulnerability discovery, triage, remediation, and automation-focused improvements.
• Build a Security Champions program within Treasury Engineering.
• Raise security concerns in senior design reviews and architecture discussions.
• Mentor security engineers through threat modeling and design review.
• Stay ahead of FinTech/crypto threat landscape and translate into defensive improvements.

Skills

Threat modeling (STRIDE)

Security architecture reviews

OWASP Top 10+

API security

Secure SDLC/DevSecOps

Cloud security (Azure/AWS/GCP)

IAM & network security

Kubernetes security

CI/CD security tooling

Python/Go

Cryptography & key management

FinTech/crypto security

Tools

DevSecOps tooling

Static/Dynamic analysis tools

SCA/Container scanning

CI/CD integration

Job description

Ripple is seeking a Senior Staff Security Engineer to lead the security posture of the Treasury platform in New York. You will own threat modeling, secure architecture, and cloud security across Azure and AWS, guiding secure-by-default design and CI/CD integration.

You will collaborate with Treasury Product and Engineering, drive vulnerability management, and mentor security engineers, while staying ahead of FinTech threat landscapes. Competitive base salary and equity.