Staff Security Engineer, Secure Digital Asset Operations

THE WORK

As a Staff Security Engineer within the Secure Digital Asset Operations (SDAO) function, you will collaborate with leadership and cross-functional Finance, Product, and Engineering teams to secure Ripple’s digital assets. Your core mission will be to architect, implement, and operate technical solutions and operational processes to protect high-value Ripple digital assets.

WHAT YOU’LL DO

• Secure Digital Asset Solutions: Design, code, implement, and maintain technical solutions and operational processes for securely and reliably performing high-value digital asset transactions
• Optimize Security Posture: Develop and deploy security automation and tooling to measure, monitor, and communicate the real-time security posture of digital assets to key stakeholders
• Smart Contract Security: Maintain and enhance program to proactively monitor and respond to smart contract risks
• Evangelize and Mentor: Raise awareness and provide guidance to engineering teams on digital asset and smart contract security best practices, driving security-by-design principles and fostering a culture of security ownership
• Guide Strategy: Advise on digital asset security engineering methodologies, tooling decisions, and vendor integrations to continuously improve the solutions used to protect Ripple’s digital assets

WHAT YOU’LL BRING

• 8+ years of industry experience in security and/or engineering with a focus on building services to secure digital assets
• Strong understanding of the security architecture for digital asset primitives and the end-to-end security of high value on-chain and off-chain transactions
• Strong working knowledge of key management solutions (MPC, HSM, etc), cryptography, and key lifecycle and management best practices that include the secure creation, distribution, storage, usage, and revocation/destruction of cryptographic keys
• Strong proficiency in Javascript and/or Python programming languages
• Experience handling sensitive work with discretion and professionalism, and demonstrated ability to become a trusted digital asset security advisor and engineer to the business
• Clear, concise technical communicator and writer who can effectively document and translate complex security and compliance topics into functional engineering requirements
• Comfortable operating on an unpaved road and dealing with ambiguity and complexity through effectively prioritizing and handling multiple assignments at a time