Staff Security Engineer, Secure Digital Asset Operations

As a Staff Security Engineer within the Secure Digital Asset Operations (SDAO) function, you will collaborate with leadership and cross-functional Finance, Product, and Engineering teams to secure Ripple’s digital assets. Your core mission will be to architect, implement, and operate technical solutions and operational processes to protect high-value Ripple digital assets.

WHAT YOU’LL DO:

Secure Digital Asset Solutions: Design, code, implement, and maintain technical solutions and operational processes for securely and reliably performing high-value digital asset transactionsOptimize Security Posture: Develop and deploy security automation and tooling to measure, monitor, and communicate the real-time security posture of digital assets to key stakeholdersSmart Contract Security: Maintain and enhance program to proactively monitor and respond to smart contract risks

Evangelize and Mentor: Raise awareness and provide guidance to engineering teams on digital asset and smart contract security best practices, driving security-by-design principles and fostering a culture of security ownership

Guide Strategy: Advise on digital asset security engineering methodologies, tooling decisions, and vendor integrations to continuously improve the solutions used to protect Ripple’s digital assets

WHAT YOU'LL BRING:

• 8+ years of industry experience in security and/or engineering with a focus on building services to secure digital assets


• Strong understanding of the security architecture for digital asset primitives and the end-to-end security of high value on-chain and off-chain transactions


• Strong working knowledge of key management solutions (MPC, HSM, etc), cryptography, and key lifecycle and management best practices that include the secure creation, distribution, storage, usage, and revocation/destruction of cryptographic keys


• Strong proficiency in Javascript and/or Python programming languages

Experience handling sensitive work with discretion and professionalism, and demonstrated ability to become a trusted digital asset security advisor and engineer to the business

• Clear, concise technical communicator and writer who can effectively document and translate complex security and compliance topics into functional engineering requirements.


• Comfortable operating on an unpaved road and dealing with ambiguity and complexity through effectively prioritizing and handling multiple assignments at a time