Through our blockchain technology & rapidly growing network of financial institutions, Ripple is improving the global financial system & increasing economic inclusion for more people, in more places around the world.  Ripple is looking for passionate Information Security professionals to build a world class Information Security program.  As part of the Information Security team, you will help us achieve this mission by actively working to protect our staff, company, & the larger crypto communities we engage with.  

Our Security Engineering team is growing, helping Ripplers design, build, & use on-premise & cloud infrastructure securely at scale. Infrastructure Security Engineers work on a broad set of efforts focusing on scaling & automating security infrastructure & processes. This team works closely with Ripples IT organization & Cloud Engineering & Operations teams to ensure we are building securely to protect our business & our customers.  In this role you may find yourself working to enforce perimeters to protect all of Ripples environments, strategizing IAM solutions, detecting vulnerabilities & ensuring patching processes, assessing & securing public cloud infrastructure, & more.  You will also support, develop & deploy tools & services to support a secure infrastructure.  All with the intention of influencing policy to simplify user experience & keep Ripple secure.

WHAT YOULL DO:

• Partnering & consulting with colleagues on remediation design & solutioning
• Continuous improvement of relevant security systems & services
• Analyze complex security issues to improve the overall posture of the firm by evaluating new functionalities & ensure preparation for production implementation
• Responsible for providing all levels of support for tactical & strategic related issues related to information security systems & services
• Collaborate with product owners & engineering teams to ensure smooth transition of the Vulnerability Management technologies into production & ensure maximum visibility into a variety of environments
• Work closely with engineering to identify opportunities for automation eliminating manual operational toil & improving quality
• Maintaining security hardening configurations & guidance for the diverse set of service available across AWS, GPC & other public cloud providers
• Responsible for maintaining current versions of functionalities & technologies in production by effecting change management processes
• Proactively participate in compliance support activities such as trainings, audit prep, playbook authoring & ensure business as usual (BAU) activities are completed accurately & artifacts are produced as required

WHAT WERE LOOKING FOR:

• 5+ years of industry experience securing public cloud services & the devops deployment process
• Strong devops skill set to support collaboration of team scripting & development activities, to include knowledge of Python, git, artifactory & how to leverage them
• Strong knowledge of course networking components & a history of executing network security
• Familiarity with the CIS benchmarks & how to monitor & remidiate deficiencies
• Experience in Cloud Computing like AWS, GCP with emphasis on Cloud Baseline management tools like Lacework
• Experience in Information Security frameworks & best practices for Vulnerability management, Risk Analysis, Reporting Metrics & Assessments
• Problem solving skills to resolve problems effectively & creatively while maintaining a high level of flexibility, professionalism, & integrity
• Highly innovative with creative contributions to asset discovery & real world risk assessments
• Seeks feedback from others, provides feedback to others in support of their development, & is open & honest while dealing constructively with criticism
• Effectively manages tasks & people, taking a practical approach to determine the most effective method of execution while respecting others expertise & considering others feelings & working styles
• Values individuals & embraces diversity by integrating differences & promoting diversity & inclusion across teams & functions
• Understands & anticipates people's needs, skills, & abilities, to coach, motivate & empower them for success
• Nce to have infosec certifications: CISSP, CEH, CISA, CRISC
• Nice to have core certifications such as:  CCNA, CCNP