Senior Staff Security Engineer, AI Security

About Ripple

Ripple is pioneering a world where value flows as effortlessly as information does today. Through innovative crypto solutions tailored for financial institutions, governments, businesses, and developers, Ripple aims to enhance the global financial infrastructure, fostering greater fairness and opportunity in diverse regions worldwide. Our culture encourages skill growth and impactful career development supported by a collaborative team environment.

Role Overview

We seek a Senior Staff Security Engineer specializing in AI Security to become Ripple's foremost technical authority at the crossroads of artificial intelligence and security. This influential individual contributor role focuses on protecting AI systems built and operated by Ripple while leveraging AI technologies to enhance and automate security functions. You will be responsible for directing AI security strategies throughout the agentic software development lifecycle (SDLC), setting up guardrails for AI adoption, and creating AI-driven security tools. Additionally, you will represent Ripple externally by contributing to industry standards, regulatory discussions, and publishing best practices in AI security.

Key Responsibilities

• Lead the strategy and roadmap for AI security, securing AI systems, and integrating security into the AI development process from inception to deployment.
• Design and deploy security mechanisms for large language model (LLM) integrated and agentic AI systems, including sandboxing, layered identity and permission controls, runtime monitoring, and containment of autonomous agent activities beyond authorized boundaries.
• Manage AI security within the Controlled Agentic SDLC by establishing guardrails, AI provenance criteria, dual-review protocols, and audit controls across engineering teams.
• Conduct security evaluations and risk assessments on all AI technologies entering production, including LLM APIs, SaaS copilots, AI-based code editors, agentic workflows, third-party multi-agent cooperative platform (MCP) servers, and AI embedded by vendors.
• Develop and enhance Ripple's capability to detect Shadow AI—unauthorized AI use—enforcing the AI acceptable use policy and ensuring all AI operations remain within auditable perimeters.
• Act as the leading technical expert on risks associated with agentic AI, covering MCP server security, tool poisoning, prompt injection threats at orchestration layers, and over-extended agency in multi-agent environments, converting threats into actionable mitigation strategies in partnership with Engineering and Product teams.
• Shape Ripple’s external AI security stance by contributing to industry frameworks, engaging with regulatory bodies, and publishing research positioning Ripple as a trusted authority in responsible AI security practices.

Required Qualifications and Experience

• Over 10 years of experience in Security Engineering with a demonstrated depth in at least two areas such as Product Security, Cloud Security, or Security Operations, alongside practical exposure to AI or machine learning security.
• Strong knowledge of AI and LLM security concepts, including vulnerabilities like prompt injections, jailbreaks, data poisoning, model extraction, retrieval-augmented generation (RAG) manipulation, and agentic risks such as tool poisoning, excessive AI agency, and MCP server vulnerabilities.
• Experience securing agentic AI systems using sandboxing, permission scoping, human oversight designs, and real-time monitoring for autonomous workflows.
• Expertise in fundamental Security Engineering domains including cloud security across AWS, GCP, or Azure platforms, CI/CD pipeline security, container and Kubernetes security, identity and access management (IAM), and API security, with ability to contextualize these in AI environments.
• Superior threat modeling skills applying methodologies like STRIDE, MITRE ATLAS, OWASP LLM Top 10, or proprietary approaches, especially in emerging and evolving architecture scenarios.
• Background in regulated sectors such as FinTech or cryptocurrency is highly advantageous, with familiarity in compliance frameworks like NYDFS, MAS, DORA, or SOC 2 concerning AI integration.
• Adept in cross-functional collaboration, capable of influencing without direct authority, and skilled at structuring complex problems bridging Engineering, Product, and Security.
• A proactive, innovative mindset motivated by tackling undefined challenges and setting high standards in the emerging field of AI security.

Work Environment and Culture

• Opportunity to thrive in a fast-moving startup atmosphere guided by seasoned industry professionals.
• Supportive learning culture promoting deep engagement with cutting-edge technologies and career growthwith professional development budgets.
• Inclusive workplace respecting diversity across race, gender, ethnicity, culture, and personal backgrounds with empowerment for all employees.
• Flexible in-office collaboration requiring presence approximately 10+ days monthly for key events and team interactions.
• Regular company-wide meetings featuring business updates and leadership Q&A sessions.
• Frequent team outings and social events fostering bonding and camaraderie.

Compensation and Benefits

• Competitive pay package including salary, bonuses, and equity options.
• Comprehensive health benefits covering physical and mental wellness, retirement planning, family support, and fertility assistance.
• Employee charitable giving matching program.
• Mobile phone reimbursement.
• Generous rest and relaxation days.
• Wellness reimbursements along with weekly onsite and virtual wellbeing programming.
• Flexible vacation policies allowing time off as needed with manager approval.
• Industry-leading parental leave and family planning benefits.
• Provided catered lunches, fully stocked kitchens, plus regular fun corporate events.

Equal Opportunity and Privacy

Ripple is an Equal Employment Opportunity employer committed to fostering an equitable and diverse workforce free from discrimination based on race, color, religion, gender identity, sexual orientation, national origin, disability, or any legally protected characteristics. We maintain transparency regarding applicant data privacy in accordance with relevant regulations in the UK, EU, and California.