Senior Staff Security Engineer, Ripple Treasury

You will be one of Ripple's most senior technical security practitioners, working at the intersection of application security, cloud infrastructure security, and secure software delivery. You'll serve as the dedicated security engineering partner for Ripple Treasury, partnering with Product and Engineering teams to drive secure design, threat modeling, vulnerability management, and cloud security architecture. You'll take ownership of the security posture of the Treasury solution, lead architecture reviews, drive cloud security across Azure and AWS, and ensure compliance with frameworks like SOC 2 and ISO 27001. You'll also mentor security engineers and build a Security Champions program to scale security influence across the Treasury engineering organization.

Responsibilities

• Serve as the dedicated Security Engineering partner for Ripple Treasury BU, owning the security posture of the Treasury solution and infrastructure environment from assessment through remediation and ongoing maturity improvement
• Lead threat modeling and security architecture reviews across Treasury offerings
• Own the secure software development lifecycle for your product surface area, defining security guardrails, CI/CD integrations, and developer guidance
• Drive the cloud security architecture for Treasury across Azure and AWS, including IAM, network segmentation, encryption, zero trust controls, Kubernetes traffic policies, and DDoS and WAF strategy
• Partner with GRC to ensure Treasury meets compliance obligations across SOC 2, ISO 27001, and applicable financial regulatory frameworks
• Own vulnerability discovery via security assessments, penetration testing and bug bounty, driving findings through triage, prioritization, remediation, and validation
• Build and scale a Security Champions model within Treasury Engineering
• Influence engineering architecture decisions at the senior level, participating in design reviews and architectural assessments
• Mentor and develop Security Engineers, raising the technical bar through threat model walkthroughs, design discussions, and structured knowledge sharing
• Stay ahead of the threat landscape for FinTech, crypto, and enterprise treasury systems, translating emerging attack techniques into concrete defensive improvements

Requirements

• 10+ years of Security Engineering experience, including hands-on work in Product Security and Infrastructure Security
• Expert-level product security skills including threat modeling using STRIDE or equivalent, security architecture review, OWASP Top 10 and beyond, API security, authentication and authorization design, and secure SDLC development
• Deep expertise in securing cloud environments across Azure, AWS, and/or GCP, covering IAM architecture, network security, secrets management, container and Kubernetes security, and infrastructure as code security