Senior Director, Security Engineering

Ripple Ripple · Fintech · San Francisco, CA +1 · Engineering

Senior Director of Security Engineering responsible for building and leading a team to secure Ripple's products, infrastructure, and corporate IT systems, with a strong focus on AI security, including agentic guardrails and AI-assisted development risk. This role ensures the secure, controlled, and auditable use of AI tooling and agentic workflows.

What you'd actually do

  1. Set the strategic vision and roadmap for the Security Engineering team, focusing on product security, infrastructure security, and IT security, with a particular focus on AI security, including agentic guardrails and AI-assisted development risk.
  2. Serve as a security domain expert, providing guidance and communicating security risks and concepts to senior leadership, engineering teams, and other partners.
  3. Define guardrails around AI agents and tools operating within Ripple's environment, including scope boundaries, blast radius limits, and rollback mechanisms.
  4. Implement and enforce agentic SDLC guardrails, testing gates, and human oversight of AI-assisted development workflows.
  5. Lead, mentor, and strengthen a team of security engineers, cultivating an atmosphere that values technical excellence, continual learning, and innovation.

Skills

Required

  • 15+ years of experience in security engineering
  • 5+ years in a leadership or management role
  • Hands-on expertise in AI security
  • Expert-level knowledge of security architecture
  • Strong understanding of cryptographic principles
  • Strong understanding of secure coding practices
  • Strong understanding of common web and blockchain vulnerabilities
  • Experience with authentication and authorization standards
  • Demonstrated expertise in IT security
  • Hands-on experience with threat modeling methodologies
  • Hands-on experience with risk identification techniques
  • Ability to communicate complex technical concepts and security risks to both technical and non-technical audiences
  • A track record of fostering a positive security culture
  • Proven experience leading and building a high-performing security team
  • Excellent problem-solving skills
  • Ability to effectively and creatively manage complex security challenges

Nice to have

  • crypto, blockchain, or FinTech space experience

What the JD emphasized

  • AI security
  • agentic guardrails
  • AI-assisted development risk
  • agentic SDLC guardrails
  • security architecture
  • cloud environments (AWS, GCP, Azure)
  • modern application stacks
  • network security
  • cryptographic principles
  • secure coding practices
  • common web and blockchain vulnerabilities
  • authentication and authorization standards (OAuth, SAML, OIDC)
  • IT security
  • endpoint protection
  • network security
  • identity and access management (IAM)
  • corporate security policy enforcement
  • threat modeling methodologies
  • risk identification techniques

Other signals

  • AI security
  • agentic guardrails
  • AI-assisted development risk
  • agentic SDLC guardrails