{"id":86292,"url":"https://alion.io/job/ripple-senior-staff-security-engineer-ripple-treasury-2","title":"Senior Staff Security Engineer, Product Security","company":{"id":4932,"name":"Ripple","domain":"ripple.com","url":"https://alion.io/company/ripple","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":16,"ghost_share":0,"stale_share":0.375,"repost_share":0,"time_to_fill_p50_days":74,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":224000,"max":300000,"currency":"USD","period":"year","gross":null,"usd_annual":300000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-08T14:34:14Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-11-02T02:16:08Z","board_verified":true,"closed_at":null,"days_open":85,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":85},"description":"At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. \nIf you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value.\nTHE WORK:\nAs a Senior Staff Security Engineer, you will be one of Ripple's most senior technical security practitioners, operating at the intersection of application security, cloud infrastructure security, and secure software delivery. This role exists to raise the technical bar and extend Ripple's security posture as the engineering organization scales across new products, new architectures, and an increasingly sophisticated threat landscape.\nYou will serve as the dedicated security engineering partner for Ripple Treasury. You will lead the technical direction for product and infrastructure security, partnering with Ripple Treasury Product and Engineering teams to drive secure design, threat modeling, vulnerability management, and cloud security architecture.\nWHAT YOU’LL DO: \nServe as the dedicated Security Engineering partner for Ripple Treasury BU, owning the security posture of the Treasury solution and infrastructure environment from assessment through remediation and ongoing maturity improvement.\nLead threat modeling and security architecture reviews across Treasury offerings.\nOwn the secure software development lifecycle for your product surface area, defining security guardrails, CI/CD integrations, and developer guidance that make secure by default a practical reality.\nDrive the cloud security architecture for Treasury across Azure and AWS, including IAM, network segmentation, encryption, zero trust controls, Kubernetes traffic policies, and DDoS and WAF strategy, ensuring full alignment with Ripple's infrastructure standards as Treasury integrates.\nPartner with GRC to ensure Treasury meets its compliance obligations across SOC 2, ISO 27001, and applicable financial regulatory frameworks as the BU integrates into Ripple's governance program.\nOwn vulnerability discovery via security assessments, penetration testing and bug bounty, driving findings through triage, prioritization, remediation, and validation with a bias toward automation and developer self-service.\nBuild and scale a Security Champions model within Treasury Engineering, embedding security advocates who extend the Security Engineering team's reach at scale.\nInfluence engineering architecture decisions at the senior level, participating in design reviews and architectural assessments with the standing to raise security concerns that get acted on.\nMentor and develop Security Engineers, raising the technical bar through threat model walkthroughs, design discussions, and structured knowledge sharing.\nStay ahead of the threat landscape for FinTech, crypto, and enterprise treasury systems, translating emerging attack techniques into concrete defensive improvements across platforms and systems.\nWHAT YOU'LL BRING: \n10+ years of Security Engineering experience, including hands-on work in Product Security and Infrastructure Security.\nExpert-level product security skills including threat modeling using STRIDE or equivalent, security architecture review, OWASP Top 10 and beyond, API security, authentication and authorization design, and secure SDLC development.\nDeep expertise in securing cloud environments across Azure, AWS, and/or GCP, covering IAM architecture, network security, secrets management, container and Kubernetes security, and infrastructure as code security.\nHands-on experience building and operating DevSecOps tooling, including static analysis, dynamic analysis, software composition analysis, secrets scanning, container scanning, and CI/CD pipeline security integration.\nStrong software engineering skills in Python, Go, or equivalent, with the ability to build security tooling, automate controls, and integrate security into engineering workflows without relying on third-party tools for everything.\nExperience with cryptographic principles and key management, including HSMs, MPC, PKI, and key rotation, with an understanding of the consequences of key management failure in financial infrastructure.\nBackground in FinTech, crypto, blockchain, or high-stakes financial environments is a strong plus, particularly where security failures have direct customer or systemic financial impact.\nA practitioner's approach. Most effective when close to the work, writing threat models, reviewing architecture documents, reading code, and building tooling.\nOther common names for this role: Security Architecture, Security Engineering Lead\nFor positions that will be based in NY, the annual salary range for this position is below. Actual salaries may vary based on numerous factors including, among other things, an individual applicant’s experience and qualifications for the position. This range does not include equity or additional compensation, such as bonuses or commissions. \nNY Annual Base Salary Range\n$224,000—$300,000 USD\nWHO WE ARE:\nDo Your Best Work\nThe opportunity to build in a fast-paced start-up environment with experienced industry leaders\nA learning environment where you can dive deep into the latest technologies and make an impact. A professional development budget to support other modes of learning.\nThrive in an environment where no matter what race, ethnicity, gender, origin, or culture they identify with, every employee is a respected, valued, and empowered part of the team.\nIn-office collaboration for moments that matter is important to our culture, and we give managers and teams the flexibility to decide which 10+ days a month they come in. \nBi-weekly all-company meeting - business updates and ask me anything style discussion with our Leadership Team\nWe come together for moments that matter which include team offsites, team bonding activities, happy hours and more!\nTake Control of Your Finances\nCompetitive salary, bonuses, and equity\nCompetitive benefits that cover physical and mental healthcare, retirement, family forming, and family support\nEmployee giving match\nMobile phone stipend\nTake Care of Yourself\nR&R days so you can rest and recharge\nGenerous wellness reimbursement and weekly onsite & virtual programming\nGenerous vacation policy - work with your manager to take time off when you need it\nIndustry-leading parental leave policies. Family planning benefits.\nCatered lunches, fully-stocked kitchens with premium snacks/beverages, and plenty of fun events\nBenefits listed above are for full-time employees. \nRipple is an Equal Opportunity Employer. We’re committed to building a diverse and inclusive team. We do not discriminate against qualified employees or applicants because of race, color, religion, gender identity, sex, sexual identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, military status, or any other characteristic protected by local law or ordinance.\n\nPlease find our California, UK/EU, Singapore, DIFC, ADGM, Australia, and Switzerland Applicant Privacy Notice for reference.","description_format":"text","description_chars":7479,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Generous vacation","Growth opportunities","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Smart Contracts & Security","Financial Software & Embedded Finance","Blockchain Infrastructure","Stablecoins"],"lifecycle":[{"event":"open","at":"2026-08-08T14:34:14Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 35 · green card filings: 21","filings_12m":35,"filings_prev_12m":43,"green_card_filings_12m":21,"median_offered_wage_usd":208750,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.847,"p_room":0.44,"age_days":84,"expected_fill_days":74,"reasons":["seen:37","velocity","win:tail","crowd:"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":300000,"is_top_pay":true},"html_url":"https://alion.io/job/ripple-senior-staff-security-engineer-ripple-treasury-2","json_url":"https://alion.io/job/ripple-senior-staff-security-engineer-ripple-treasury-2.json","meta":{"generated_at":"2026-11-02T02:44:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4180,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4932},"rest":"https://alion.io/mcp/rest/get_company?id=4932"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fripple-senior-staff-security-engineer-ripple-treasury-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fripple-senior-staff-security-engineer-ripple-treasury-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fripple-senior-staff-security-engineer-ripple-treasury-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ripple-senior-staff-security-engineer-ripple-treasury-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fripple-senior-staff-security-engineer-ripple-treasury-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":86292}},{"tool":"search_jobs","arguments":{"company":"ripple.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":86292},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}