Senior Security Engineer | Enterprise Security

About Ramp

At Ramp, we're rethinking how modern finance teams function in the age of AI. We believe AI isn't just the next big wave. It's the new foundation for how business gets done. We're investing in that future - and in the people bold enough to build it.

Ramp is a financial operations platform designed to save companies time and money. Our all-in-one solution combines payments, corporate cards, vendor management, procurement, travel booking, and automated bookkeeping with built-in intelligence to maximize the impact of every dollar and hour spent. More than 50,000 businesses, from family-owned farms to e-commerce giants to space startups, have saved $10B and 27.5M hours with Ramp. Founded in 2019, Ramp powers the fastest-growing corporate card and bill payment platform in America, and enables over $100 billion in purchases each year.

Ramp's investors include Lightspeed Venture Partners, Thrive Capital, Sands Capital, General Catalyst, Founders Fund, Khosla Ventures, Sequoia Capital, Greylock, and Redpoint, as well as over 100 angel investors who were founders or executives of leading companies. The Ramp team comprises talented leaders from leading financial services and fintech companies-Stripe, Affirm, Goldman Sachs, American Express, Mastercard, Visa, Capital One-as well as technology companies such as Meta, Uber, Netflix, Twitter, Dropbox, and Instacart.

Ramp has been named to Fast Company's Most Innovative Companies list and LinkedIn's Top U.S. Startups for more than 3 years, as well as the Forbes Cloud 100, CNBC Disruptor 50, and TIME Magazine's 100 Most Influential Companies.

About the Role

Join Ramp's Enterprise Security team to operationalize core and sovereign security programs. You'll oversee Insider Risk, DLP, SaaS posture, and Endpoint security across corporate and FedRAMPaligned environments-setting strategy, implementing controls, and measuring outcomes. Ramp is agentfirst : you will securely enable AI assistants and automated workflows across the enterprise.

Please note that this role will require you to be comfortable with working in-person at our NYC HQ (located near Madison Square Park) at least 2 days / week

What You'll Do

• Harden Core Programs : Evaluate and uplift Insider Risk and DLP coverage; tune detections, policies, and workflows endtoend.
• Secure SaaS at Scale : Use SSPM / CASB and configuration baselines to remediate misconfigurations, remove stale access / admins, enforce key rotation, and gate risky app / OAuth scopes.
• Operate Sovereign SaaS : Maintain strict access and monitoring for sovereign Google Workspace and Okta tenants; ensure controls map to NIST 80053 / 800171 and FedRAMPaligned requirements.
• Modernize Identity & Access : Enforce phishingresistant MFA, deviceaware access, least privilege / JIT, SCIM lifecycle, and strong breakglass patterns.
• Endpoint & Network Defense : Keep macOS / Windows hardened at scale (EDR, disk encryption, MDM), ensure patch SLAs, and apply ZTNA / SSE (e.g., Cloudflare WARP) policies.
• Continuous Improvement : Define metrics (coverage, policy efficacy, MTTD / MTTR, configuration drift), run control health reviews, and close gaps across corporate and sovereign environments.
• Partner & Ship : Work with IT to validate endpoint agents and patching; document risks, decisions, and runbooks succinctly.

What You Need

Nice-to-Haves

Benefits (for U.S.-based full-time employees)

Partially covered for your dependents

Referral Instructions

If you are being referred for the role, please contact that person to apply on your behalf.

Other notices

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Ramp Applicant Privacy Notice