Staff Security Engineer, Secure Digital Asset Operations

Ripple Ripple · Fintech · New York, NY +1 · Engineering

Staff Security Engineer focused on securing digital assets through technical solutions, operational processes, and smart contract security. Requires strong understanding of digital asset security architecture, key management, and programming in Javascript/Python.

What you'd actually do

  1. Design, code, implement, and maintain technical solutions and operational processes for securely and reliably performing high-value digital asset transactions
  2. Develop and deploy security automation and tooling to measure, monitor, and communicate the real-time security posture of digital assets to key stakeholders
  3. Maintain and enhance program to proactively monitor and respond to smart contract risks
  4. Raise awareness and provide guidance to engineering teams on digital asset and smart contract security best practices, driving security-by-design principles and fostering a culture of security ownership
  5. Advise on digital asset security engineering methodologies, tooling decisions, and vendor integrations to continuously improve the solutions used to protect Ripple’s digital assets

Skills

Required

  • Security engineering
  • Digital asset security
  • Smart contract security
  • Key management solutions (MPC, HSM)
  • Cryptography
  • Javascript
  • Python

Nice to have

  • Security architecture
  • On-chain and off-chain transaction security
  • Technical communication
  • Technical writing
  • Handling ambiguity

What the JD emphasized

  • 8+ years of industry experience in security and/or engineering with a focus on building services to secure digital assets
  • Strong understanding of the security architecture for digital asset primitives and the end-to-end security of high value on-chain and off-chain transactions
  • Strong working knowledge of key management solutions (MPC, HSM, etc), cryptography, and key lifecycle and management best practices that include the secure creation, distribution, storage, usage, and revocation/destruction of cryptographic keys
  • Strong proficiency in Javascript and/or Python programming languages