Senior Security Engineer

THE WORK:

As a Senior Security Engineer focusing on anti-abuse and threat intelligence, you will lead the design and development of systems and automation to detect, mitigate, and prevent threats targeting Ripple’s staff, products, and users. This includes identifying and advising on Advanced Persistent Threats (APTs) targeting the crypto ecosystem, phishing campaigns, impersonation attempts, and social engineering campaigns across web, mobile, and social platforms. You will collaborate closely with Legal, Communications, Brand Security, and third-party vendors to build a scalable and proactive threat intelligence capability.

WHAT YOU’LL DO:

• Operationalize threat intelligence: Develop systems to detect and disseminate intelligence on threats impacting Ripple and Ripple customers.


• Automate intelligence sharing: Build tooling, workflows and AI agents to streamline the integration and interpretation of intelligence across Ripple orgs.


• Analyze attack patterns: Investigate attacker infrastructure and threat trends to advise proactive defenses.


• Develop internal visibility tools: Create dashboards and alerts to supervise threat detection and public awareness on emerging threats.


• Assist with incident response: Assist in investigations for sophisticated abuse cases and help implement long-term preventative measures.


• Guide strategy: Advise on threat intelligence standard methodologies, tooling decisions, and vendor integrations to improve Ripple’s external security posture.

WHAT YOU'LL BRING: 

• 5+ years of experience working within a security, abuse prevention, or threat detection domain, ideally with exposure to large-scale platforms, FinTech, or crypto environments.


• Proficiency in Python, Go, or similar languages for building automation and detection systems.


• Experience investigating cyber threats, phishing, impersonation, or abuse at scale - ideally in FinTech, crypto, or social platforms.


• Ability to analyze attack trends, extract insights, and drive detection improvements through data.


• Familiarity with abuse reporting and enforcement APIs (e.g., threat intelligence feeds, social platforms, domain registrars).


• Strong communication skills and an ability to tailor them to various technical/non-technical audiences.


• Passion for stopping bad actors and building trust in crypto ecosystems.


• Above all, a teammate that can handle ambitious situations, a rapidly maturing security culture, and an eagerness to mentor less expert engineers

Other common names for this role: Senior Threat Intelligence Engineer, Senior Trust & Safety Engineer