# Security Engineer, Product
**Company:** [Ramp](https://scaleengineer.com/companies/ramp)
A Senior Security Engineer role at Ramp, a fast-growing fintech company, focusing on building secure application primitives, deploying platform-level security mitigations, and collaborating with engineering teams to design inherently secure solutions. Requires 5+ years of software development experience with 2+ years in security or infrastructure.
**Role:** Security Engineer
**Seniority:** Senior
**Locations:** New York, NY (HQ)
**Salary:** 257800–354550 USD
[Apply](https://jobs.ashbyhq.com/ramp/7c26780b-7923-42d5-8111-9825ff996966)
Canonical: https://scaleengineer.com/jobs/ramp/security-engineer-product
---
## Responsibilities

- Security Application Development: Build security-focused application primitives and integrate them into existing products
- Platform Security Solutions: Design and deploy platform-level mitigations to common security issues
- Vulnerability Remediation: Lead remediation of prioritized issues across technology stack, collaborating with engineers to triage and fix vulnerabilities
- Security Architecture: Partner with engineering teams to design and deploy solutions which are inherently secure
- Security Tooling: Champion the use of security tooling including linters, static analysis, posture assessment scanners, and query inspectors

## Requirements

### education

### technical

- {"name":"Software Development","description":"Minimum 5 years of experience building software applications"}
- {"name":"Security/Infrastructure Focus","description":"Minimum 2 years of experience focused on platform, infrastructure, and/or security"}
- {"name":"Business Solution Translation","description":"Ability to turn business and product ideas into engineering solutions"}

### experience

- {"name":"Fast-Paced Environment","description":"Desire to work in a fast-paced environment with continuous growth mindset"}
- {"name":"Values Alignment","description":"Alignment with Ramp's core values of enabling businesses to grow more by spending less"}

## Skills

### required

- {"name":"Software Engineering","description":"5+ years of experience in software development with strong engineering fundamentals"}
- {"name":"Security Engineering","description":"2+ years of hands-on experience in security, platform, or infrastructure engineering"}
- {"name":"Vulnerability Management","description":"Experience with identifying, triaging, and remediating security vulnerabilities"}
- {"name":"Security Tooling","description":"Proficiency with security tools including static analysis, linters, and security scanners"}

### preferred

- {"name":"Python/Flask","description":"Experience developing backend services using Python and Flask framework"}
- {"name":"Elixir","description":"Knowledge of Elixir for building concurrent and fault-tolerant systems"}
- {"name":"AWS Security","description":"Experience analyzing and improving security posture of AWS infrastructure"}
- {"name":"AWS ECS","description":"Hands-on experience with Amazon ECS and other core AWS services"}
- {"name":"Cloud Security","description":"Understanding of cloud security best practices and threat models"}

## Tech stack

### tools

- {"name":"Static Analysis Tools","description":"Code analysis tools for security vulnerability detection"}
- {"name":"Linters","description":"Code quality and security analysis tools"}
- {"name":"Posture Assessment Scanners","description":"Security posture evaluation and monitoring tools"}
- {"name":"Query Inspectors","description":"Database query security analysis tools"}

### others

- {"name":"AWS ECS","description":"Container orchestration service for deploying applications"}
- {"name":"AWS Core Services","description":"Various Amazon Web Services for cloud infrastructure"}
- {"name":"Bug Bounty Programs","description":"Crowdsourced security testing and vulnerability discovery"}
- {"name":"Penetration Testing","description":"Security testing methodologies and tools"}

### databases

### languages

- {"name":"Python","description":"Backend development using Flask framework"}
- {"name":"Elixir","description":"Functional programming language for concurrent applications"}

### frameworks

- {"name":"Flask","description":"Python web framework for building APIs and web applications"}

## Benefits

### benefits

- {"name":"Health Insurance","description":"100% medical, dental & vision insurance coverage for employee, partially covered for dependents"}
- {"name":"One Medical","description":"Annual membership to One Medical healthcare service"}
- {"name":"401k Plan","description":"Retirement plan with employer match on contributions made while employed"}
- {"name":"Flexible PTO","description":"Unlimited paid time off policy"}
- {"name":"Fertility Benefits","description":"Health Reimbursement Account up to $10,000 per year for fertility treatments"}
- {"name":"Parental Leave","description":"Paid leave for new parents"}
- {"name":"AI Token Usage","description":"Unlimited access to AI tools and platforms"}
- {"name":"Pet Insurance","description":"Coverage for pet healthcare expenses"}
- {"name":"Home Office Setup","description":"Centralized equipment ordering for remote work setup"}
- {"name":"Health & Wellness Stipend","description":"Allowance for health and wellness expenses"}
- {"name":"Office Perks","description":"In-office lunch, snacks, drinks, and amenities"}
- {"name":"Travel Budget","description":"Budget for intra-office travel between locations"}
- {"name":"Relocation Support","description":"Assistance with relocation to NYC or SF as needed"}

## Compensation

- **max:** 0
- **min:** 0
- **currency:** 
- **stockOptions:** false

## Interview process

### steps

- {"name":"Initial Screen","description":"Phone or video screening with recruiter to discuss background and role fit"}
- {"name":"Technical Interview","description":"Deep dive into security engineering experience, system design, and problem-solving approach"}
- {"name":"Security Case Study","description":"Technical discussion around real-world security scenarios and remediation strategies"}
- {"name":"Team Collaboration","description":"Interview with engineering team members to assess collaboration and communication skills"}
- {"name":"Final Interview","description":"Leadership interview focusing on cultural fit and alignment with Ramp's values"}

## Full description
# **About Ramp**

At Ramp, we’re rethinking how modern finance teams function in the age of AI. We believe AI isn’t just the next big wave. It’s the new foundation for how business gets done. We’re investing in that future — and in the people bold enough to build it.

Ramp is a financial operations platform designed to save companies time and money. Our all-in-one solution combines payments, corporate cards, vendor management, procurement, travel booking, and automated bookkeeping with built-in intelligence to maximize the impact of every dollar and hour spent. More than 50,000 businesses, from family-owned farms to e-commerce giants to space startups, have saved $10B and 27.5M hours with Ramp. Founded in 2019, Ramp powers the fastest-growing corporate card and bill payment platform in America, and enables over $100 billion in purchases each year.

Ramp’s investors include Lightspeed Venture Partners, Thrive Capital, Sands Capital, General Catalyst, Founders Fund, Khosla Ventures, Sequoia Capital, Greylock, Redpoint, and ICONIQ, as well as over 100 angel investors who were founders or executives of leading companies. The Ramp team comprises talented leaders from leading financial services and fintech companies—Stripe, Affirm, Goldman Sachs, American Express, Mastercard, Visa, Capital One—as well as technology companies such as Meta, Uber, Netflix, Twitter, Dropbox, and Instacart.

Ramp has been named to Fast Company’s [Most Innovative Companies](https://www.fastcompany.com/91038883/ramp-most-innovative-companies-2024) list and LinkedIn’s [Top U.S. Startups](https://www.linkedin.com/pulse/linkedin-top-startups-2024-50-us-companies-rise-linkedin-news-hxote/?trackingId=uBI29YlAOxikbTI7cdvG4g%3D%3D) for more than 3 years, as well as the Forbes [Cloud 100](https://www.forbes.com/sites/richardnieva/2024/08/06/ramp-cloud-100/), CNBC [Disruptor 50](https://www.cnbc.com/2024/05/14/ramp-cnbc-disruptor-50.html), and TIME Magazine’s 100 [Most Influential Companies](https://time.com/collection/time100-companies-2023/6285147/ramp/).

**About the Role**

The Product Security team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information.

Our work centers in three areas:

* Ramp builds products with an eye for security
* Ramp detects and responds to threats before they cause harm
* Security powers Ramp’s growth

Check out our[ Engineering Blog](https://engineering.ramp.com/) for more on our tech stack, mission and values!

**What You’ll Do**

* Build security-focused application primitives and integrate them into our existing products
* Design and deploy platform-level mitigations to common security issues
* Lead remediation of prioritized issues across our technology stack: collaborating with other engineers to triage and fix vulnerabilities discovered internally, through penetration testing, and through our bug bounty program
* Partner with engineering teams to design and deploy solutions which are inherently secure
* Champion the use of tooling (linters, static analysis, posture assessment scanners, query inspectors, etc.) which help Ramp engineers build secure systems more quickly

**What You Need**

* Minimum of 5 years of experience building software
* Minimum of 2 years of experience focused on platform, infrastructure, and/or security
* Desire to work in a fast-paced environment, continuously grow, and master your craft
* Ability to turn business and product ideas into engineering solutions
* Alignment with Ramp’s core values of enabling businesses to grow more by spending less

**Nice to Haves**

* Experience with Python (Flask), Elixir, and AWS (ECS, as well as other core services)
* Experience analyzing and improving the security posture of infrastructure in AWS

## **Benefits (for U.S.-based full-time employees)**

* 100% medical, dental & vision insurance coverage for you

  * Partially covered for your dependents
  * One Medical annual membership
* 401k (including employer match on contributions made while employed by Ramp)
* Flexible PTO
* Fertility HRA (up to $10,000 per year)
* Parental Leave
* Unlimited AI token usage
* Pet insurance
* Centralized home-office equipment ordering for all employees
* Health and Wellness stipend
* In-office perks: lunch, snacks, drinks, and more
* Budget for intra-office travel
* Relocation support to NYC or SF (as needed)

## **Referral Instructions**

If you are being referred for the role, please contact that person to apply on your behalf.

## **Other notices**

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

_Beware of recruiting scams: Ramp will only contact you through official @_[_Ramp.com_](http://Ramp.com) _email addresses and will never ask for payment or sensitive personal information during the hiring process._

[Ramp Applicant Privacy Notice](https://ramp.com/legal/applicant-privacy-notice)