SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Ripple is seeking a Senior Staff Security Engineer focused on AI Security to serve as the company's deepest technical expert at the intersection of artificial intelligence and security. This is a high-impact individual contributor role spanning two critical mandates: securing AI systems that Ripple builds and operates, and leveraging AI to enhance Ripple's security function's speed, intelligence, and scalability.
You will lead technical strategy for AI security across the agentic software development lifecycle, define and operationalize guardrails for LLM and agentic AI adoption, and build AI-powered security tooling in partnership with the broader organization. You will also shape Ripple's external posture on AI security, contributing to industry standards and regulatory discussions.
Key responsibilities include: driving AI security technical strategy and roadmap; designing and implementing security controls for LLM-integrated and agentic AI systems (sandboxing, identity/permission scoping, runtime monitoring, autonomous agent containment); owning AI security across the controlled agentic SDLC with guardrails and audit trail controls; leading security review and risk assessment of all AI integrations entering production; building and scaling shadow AI detection capabilities; serving as the go-to technical resource on agentic AI risks (MCP server security, tool poisoning, prompt injection, excessive agency); and shaping Ripple's external AI security posture through industry frameworks and published research.
Required qualifications: 10+ years of security engineering experience with demonstrated depth in at least two domains (product security, cloud security, security operations) and meaningful hands-on exposure to AI/ML security; solid understanding of AI and LLM security concepts (prompt injection, jailbreaks, data poisoning, model extraction, RAG manipulation, agentic risks); experience securing agentic AI systems; fluency with core security engineering domains (cloud security on AWS/GCP/Azure, CI/CD pipeline security, container/Kubernetes security, IAM, API security); strong threat modeling instincts using frameworks like STRIDE, MITRE ATLAS, or OWASP LLM Top 10; experience in fintech, crypto, or regulated environments with exposure to frameworks like NYDFS, MAS, DORA, or SOC 2; proven ability to work across teams and influence without direct authority; and a builder's mentality comfortable with ambiguity and emerging problems.
