Senior Security Analyst, Enterprise Security
About Ramp
At Ramp, we’re rethinking how modern finance teams function in the age of AI. We believe AI isn’t just the next big wave. It’s the new foundation for how business gets done. We’re investing in that future — and in the people bold enough to build it.
Ramp is a financial operations platform designed to save companies time and money. Our all-in-one solution combines payments, corporate cards, vendor management, procurement, travel booking, and automated bookkeeping with built-in intelligence to maximize the impact of every dollar and hour spent. But we’re not just building features powered by AI. We’re building a platform where agents can chase receipts, close books, flag risks, and surface insights. This enables teams to reclaim their time and reinvest in what matters.
More than 40,000 businesses, from family-owned farms to space startups, have saved $10B and 27.5M hours with Ramp. Founded in 2019, Ramp powers the fastest-growing corporate card and bill payment platform in America, and enables over $80 billion in purchases each year.
Ramp’s investors include Thrive Capital, Sands Capital, General Catalyst, Founders Fund, Khosla Ventures, Sequoia Capital, Greylock, and Redpoint, among others, in addition to 100+ angel investors who have been founders or executives of leading companies.
Ramp has been named to Fast Company’s Most Innovative Companies list and LinkedIn’s Top U.S. Startups for more than 3 years, as well as the Forbes Cloud 100, CNBC Disruptor 50, and TIME Magazine’s 100 Most Influential Companies.
About the Role
Join Ramp’s Enterprise Security team to operationalize core and sovereign security programs. You’ll oversee Insider Risk, DLP, SaaS posture, and Endpoint security across corporate and FedRAMP‑aligned environments—setting strategy, implementing controls, and measuring outcomes. Ramp is agent‑first: you will securely enable AI assistants and automated workflows across the enterprise.
Please note that this role will require you to be comfortable with working in-person at our NYC HQ (located near Madison Square Park) at least 2 days/week
What You’ll Do
Harden Core Programs: Evaluate and uplift Insider Risk and DLP coverage; tune detections, policies, and workflows end‑to‑end.
Secure SaaS at Scale: Use SSPM/CASB and configuration baselines to remediate misconfigurations, remove stale access/admins, enforce key rotation, and gate risky app/OAuth scopes.
Operate Sovereign SaaS: Maintain strict access and monitoring for sovereign Google Workspace and Okta tenants; ensure controls map to NIST 800‑53/800‑171 and FedRAMP‑aligned requirements.
Modernize Identity & Access: Enforce phishing‑resistant MFA, device‑aware access, least privilege/JIT, SCIM life‑cycle, and strong break‑glass patterns.
Endpoint & Network Defense: Keep macOS/Windows hardened at scale (EDR, disk encryption, MDM), ensure patch SLAs, and apply ZTNA/SSE (e.g., Cloudflare WARP) policies.
Continuous Improvement: Define metrics (coverage, policy efficacy, MTTD/MTTR, configuration drift), run control health reviews, and close gaps across corporate and sovereign environments.
Partner & Ship: Work with IT to validate endpoint agents and patching; document risks, decisions, and runbooks succinctly.
What You Need
3+ years in enterprise/corporate security engineering or operations.
U.S. citizenship is required for this role.
Proven delivery hardening Insider Risk, DLP, SaaS posture, and endpoint controls.
Hands‑on Okta administration and Google Workspace security configuration.
Experience with EDR/MDM, SSPM/CASB, DSPM, and ZTNA/SSE; macOS/Windows hardening at scale.
Solid grasp of IAM and control mapping in FedRAMP‑aligned environments; familiarity with NIST 800‑53/171.
Ability to identify gaps, design remediations, automate where possible, and drive adoption across teams.
Clear, concise communicator who writes crisp docs and runbooks.
Nice-to-Haves
Experience aligning Google Workspace and Okta to regulated/sovereign requirements.
Background scaling security in a high‑growth, cloud‑first company.
Relevant certs (CISSP, CISM, Security+, GIAC) or equivalent real‑world depth.
Benefits (for U.S.-based full-time employees)
100% medical, dental & vision insurance coverage for you
Partially covered for your dependents
One Medical annual membership
401k (including employer match on contributions made while employed by Ramp)
Flexible PTO
Fertility HRA (up to $5,000 per year)
WFH stipend to support your home office needs
Wellness stipend
Parental Leave
Relocation support to NYC or SF (as needed)
Pet insurance
Referral Instructions
If you are being referred for the role, please contact that person to apply on your behalf.
Other notices
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
Lead the Activation & Expansion product area to accelerate onboarding, drive customer value, and scale expansion across Ramp’s multi-product finance platform.
Intel's Government IT & Security team is hiring a Government Information Security System Administrator to harden, operate, and validate compliant Windows and Linux systems supporting U.S. Government contracts.
Experienced CRM Administrator/Project Coordinator needed to manage Oracle Service Cloud administration and coordinate CRM projects for a local Atlanta client.
Ventures Unlimited Inc. seeks a skilled Windows and VMware Administrator to manage Windows Server environments, vCenter/ESXi hosts, storage presentation, and migrations at their Wichita, KS location.
Bezos Academy seeks a Senior Information Security Engineer to lead cloud and application security efforts, strengthen privacy compliance, and mature security practices across its SaaS/PaaS environment.
Experienced Epic Radiant analyst needed to lead complex application analysis, testing, and support for an academic health system operating across Maryland.
AnaVation seeks an experienced Security Engineer with strong vulnerability management, SIEM/EDR, and incident response skills to support a Washington, DC federal customer (hybrid, active Secret required).
Kentro seeks an experienced Senior Cybersecurity Engineer to support a DOD SOCOM on-site mission in Fayetteville, NC, delivering RMF/NIST-aligned security, incident response, and IAM/PKI integration.
Business Wire is hiring a Senior Infrastructure Engineer to design, automate, and maintain scalable Linux infrastructure across on-premise and AWS environments.
OHA is hiring an IT Manager to supervise technical teams and manage vendor-delivered infrastructure and application services for the State Based Marketplace program.
Support Florida Poly’s Security Operations Center as a student worker monitoring alerts, triaging incidents, and assisting with SIEM/EDR tools and SOC operations.
Lead MUFG’s regional Global Security Operations Center in Tempe, managing Tier 1/2 teams to ensure continuous monitoring, effective incident response, and operational excellence.
Stride, Inc. seeks a Cloud Security Automation Engineer with strong programming and AWS experience to architect automated security workflows, tool integrations, and scalable cloud infrastructure.
Ramp is a multinational financial technology company headquartered in Manhattan and founded in 2019. We are the fastest-growing corporate card and bill payment platform in the US, and enables billions of dollars in purchases each year.
78 jobs
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
