SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Ripple is seeking a Senior Staff Security Engineer to lead AI security strategy and execution across the organization. This is a high-impact individual contributor role at the intersection of artificial intelligence and security, spanning two critical mandates: securing AI systems that Ripple builds and operates, and leveraging AI to enhance Ripple's security function.
Key responsibilities include:
- Develop and execute AI security technical strategy and roadmap, defining how Ripple secures AI systems, governs agentic workflows, and embeds security controls into the AI development lifecycle.
- Design and implement security controls for LLM-integrated and agentic AI systems, including sandboxing, identity and permission scoping, runtime monitoring, and containment of autonomous agent actions.
- Own AI security across the Controlled Agentic SDLC, establishing guardrails, AI provenance standards, dual-review requirements, and audit trail controls for AI-assisted development.
- Lead security review and risk assessment of all AI integrations entering production, including LLM APIs, SaaS copilots, AI code editors, agentic workflows, third-party MCP servers, and vendor-embedded AI.
- Build and scale Shadow AI detection capability to surface unsanctioned AI usage and ensure all AI workflows operate within Ripple's auditable perimeter.
- Serve as the go-to technical resource on agentic AI risks, including MCP server security, tool poisoning, prompt injection, and excessive agency in multi-agent systems.
- Shape Ripple's external AI security posture by contributing to industry frameworks, engaging with regulators, and publishing research.
Required qualifications: 10+ years of security engineering experience with depth in product security, cloud security, or security operations; solid understanding of AI/LLM security concepts including prompt injection, jailbreaks, data poisoning, and agentic risks; experience securing agentic AI systems; fluency with cloud security (AWS/GCP/Azure), CI/CD pipeline security, container/Kubernetes security, IAM, and API security; strong threat modeling skills; proven ability to influence across teams without direct authority; builder's mentality and comfort with ambiguity.
FinTech or crypto experience in regulated environments is a strong plus.
