Staff Security Engineer, Secure Digital Asset Operations

THE WORK:

As a Staff Security Engineer within the Secure Digital Asset Operations (SDAO) function, you will collaborate with leadership and cross-functional Finance, Product, and Engineering teams to secure Ripple’s digital assets. Your primary responsibility will be designing, implementing, managing, and optimizing processes and solutions in place to protect these assets.

WHAT YOU’LL DO:

• Secure digital assets: Develop, implement, document, and manage processes to catalogue and secure the handling and storage of digital assets.
• Continuously enhance security posture: Drive security risk assessments of digital asset safeguards to find opportunities for improvement, then collaborate with the Information Security team and cross-functional partners to design and implement those improvements.
• Effectively communicate security posture: Develop effective methods to measure, supervise, and communicate security posture to key partners.
• Evangelize security best practices: Raise awareness among individuals and teams through educating them on how to secure both Ripple and personal digital assets effectively.
• Guide strategy: Advise on digital asset security methodologies, tooling decisions, and vendor integrations to improve the security posture.

WHAT YOU'LL BRING:

• 8+ years of industry experience in information securitysecuring digital assets, and a demonstrated knowledge of crypto/blockchain/web3/smart contracts.
• Strong knowledge of key management solutions, cryptography, and key management best practices that include the secure creation, distribution, storage, and usage of cryptographic keys.
• Hands-on experience setting up, configuring, and maintaining a variety of digital asset wallet solutions (Software, Hardware, MPC, and/or MultiSig Wallets) and secure offline laptop solutions.
• Experience handling sensitive work with discretion and professionalism, and demonstrated ability to become a trusted digital asset security advisor to the business.
• Clear and concise communicator/writer who can effectively communicate to varying levels of junior and senior stakeholders across different organizations, hold teams accountable, and can document and translate complex security and compliance topics into functional requirements.
• Comfortable operating on an unpaved road and dealing with ambiguity and complexity through effectively prioritizing and handling multiple assignments at a time.