Senior Staff Security Architect - Treasury & Cloud Security

Ripple; New York (NY); On-site; USD 224,000 - 300,000; Full time

Benefits offered by this job

Bonuses and equity

Mobile phone stipend

Wellness reimbursement

Generous vacation policy

Employee giving match

Job summary

Ripple is seeking a Senior Staff Security Engineer to join our Treasury security team. You will lead threat modeling, architecture reviews, and secure software delivery across Azure and AWS, shaping security for the Treasury product and infrastructure.

The role emphasizes automation, DevSecOps, and mentoring security engineers within a fast-growing FinTech environment. Ideal candidates have 10+ years in security engineering, strong cloud security expertise, and experience with cryptography and

Qualifications

• 10+ years of Security Engineering experience in Product and Infrastructure security.
• Expert-level product security skills: threat modeling (STRIDE), architecture reviews, API security, and secure SDLC.
• Deep cloud security expertise across Azure/AWS/GCP, incl. IAM, network security, secrets management, container/Kubernetes security, IaC security.
• Hands-on DevSecOps tooling: SAST, DAST, SCA, secrets scanning, container scanning, CI/CD security integration.
• Strong software engineering skills in Python or Go; automate security controls within engineering workflows.
• Experience with cryptographic principles, including HSMs, MPC, PKI, and key rotation.
• Background in FinTech, crypto, blockchain, or high-stakes financial environments is a plus.
• Practitioner approach: threat modeling, architecture review, code-reading, tooling.

Responsibilities

• Serve as the dedicated security engineering partner for Ripple Treasury, owning security posture from assessment to remediation.
• Lead threat modeling and security architecture reviews across Treasury offerings.
• Own the secure SDLC for the product surface area and define guardrails for secure-by-default delivery.
• Drive cloud security architecture for Treasury across Azure and AWS, incl. IAM, network segmentation, encryption, and zero trust.
• Partner with GRC to meet SOC 2, ISO 27001 and financial regulatory obligations.
• Lead vulnerability discovery via assessments, pentests, and bug bounty; drive remediation with automation.
• Build and scale a Security Champions model within Treasury Engineering.
• Influence senior engineering decisions; raise security concerns in design reviews.
• Mentor Security Engineers through threat modeling and design discussions.
• Stay ahead of FinTech/crypto threat landscape; translate into defensive improvements.

Skills

Threat modeling (STRIDE)

Security architecture

OWASP Top 10

API security

Authentication & authorization design

Secure SDLC

Cloud security (Azure/AWS/GCP)

DevSecOps tooling

Python/Go

Cryptography & key management

FinTech/crypto security

Tools

Kubernetes

AWS

Azure

GCP

IAM

SAST/DAST/SCA tools

Job description

Ripple is seeking a Senior Staff Security Engineer to join our Treasury security team. You will lead threat modeling, architecture reviews, and secure software delivery across Azure and AWS, shaping security for the Treasury product and infrastructure.

The role emphasizes automation, DevSecOps, and mentoring security engineers within a fast-growing FinTech environment. Ideal candidates have 10+ years in security engineering, strong cloud security expertise, and experience with cryptography and