Senior Director, Security Engineering

THE WORK:

As the Director of Security Engineering, you will be responsible for building and leading a dedicated, humble, and paranoid team of Security Engineers to secure Ripple's products, infrastructure, and corporate IT systems. You will play a substantial role in defining the security strategy and encouraging a culture of security across the entire company. Your leadership will be crucial in protecting our business and our customers by embedding security into every layer of our technology stack.

WHAT YOU'LL DO:

• Set the strategic vision and roadmap for the Security Engineering team, focusing on product security, infrastructure security, and IT security.
• Lead, mentor, and strengthen a team of security engineers, cultivating an atmosphere that values technical excellence, continual learning, and innovation.
• Serve as a security domain expert, providing guidance and communicating security risks and concepts to senior leadership, engineering teams, and other partners.
• Drive the implementation of security guidelines across the engineering organization, ensuring security is integrated into day-to-day development processes.
• Collaborate with engineering, product, and IT leadership to ensure alignment on security priorities and to champion security outcomes on behalf of our customers.

WHAT YOU'LL BRING:

• 15+ years of experience in security engineering, with at least 5+ years in a leadership or management role, preferably in the crypto, blockchain, or FinTech space.
• Expert-level knowledge of security architecture, including cloud environments (AWS, GCP, Azure), modern application stacks, and network security.
• Strong understanding of cryptographic principles, secure coding practices, and common web and blockchain vulnerabilities (e.g., OWASP Top 10).
• Experience with authentication and authorization standards (OAuth, SAML, OIDC) and their security implications.
• Demonstrated expertise in IT security, including endpoint protection, network security, identity and access management (IAM), and corporate security policy enforcement.
• Hands-on experience with threat modeling methodologies and risk identification techniques.
• Ability to communicate complex technical concepts and security risks to both technical and non-technical audiences.
• A track record of fostering a positive security culture within an organization and proven experience leading and building a high-performing security team.
• Excellent problem-solving skills and the ability to effectively and creatively manage complex security challenges.