Summary

Join our growing security team and help build our business-enabling Security Platform program at Ramp. This role will provide direct impact by owning security platform initiatives to empower cross-functional teams and secure Ramp.  

Our team’s mission is to ensure customer data and Ramp systems are protected through the following pods:

1. Corporate Security - Implementing solutions to pare down risk and protect our most valuable assets
2. Detection & Response - Detecting threats in our environment to proactively respond to potential incidents 
3. Security Assurance - Providing trust to customers by assessing security risks, controls, and frameworks
4. Product Security - Building customer trust by improving Ramp’s products and systems
5. Platform Security - Empowering cross-functional partners by building and securing internal security platforms

What You’ll Do

1. Own the platform infrastructure and controls (e.g, Source control, Environment separation) across both internal (Retool) and security (Cloudflare Tunnels, DLP solutions) tools
2. Implement solutions to securely access databases (e.g., Clickhouse, Snowflake), document storage (e.g., S3 buckets), and secrets
3. Own the internal permissions architecture for critical systems to enable cross functional teams while securing customer data
4. Utilize infrastructure management tooling (Terraform) to improve critical infrastructure and systems that are used to operate internal Security tools at scale (i.e. compute, networking, deployment, observability, code tooling/libraries, etc.)
5. Build dashboards, monitors, and alerts for internal tooling to debug reliability and scalability issues 
6. Partner cross-functionally to understand and effectively solve pain points and requirements 

What You Need

1. Minimum of 5 years of experience with scripting languages (e.g., Python) focused on platform, infrastructure, and/or security
2. Minimum 2 years of experience developing, securing, and deploying infrastructure for internal (e.g., Retool, Superblocks) or security (e.g, SOAR, DLP) tooling
3. Hands-on experience with infrastructure-as-a-code using Terraform to manage cloud environments (AWS, GCP, or Azure)
4. Experience building monitors and alerts with tools like Datadog
5. Excellent analytical, problem-solving, and communication skills to solve significant complex technical problems
6. Ability to work independently and collaboratively in a dynamic and fast-paced environment
7. An ability to think through customer requirements and come up with high-impact ways to quickly solve their problems
8. In-depth knowledge of security concepts, principles, and best practices, including network security, encryption, authentication, and authorization

Nice to Haves

1. Experience with Python (Flask)
2. Experience with Clickhouse, Snowflake, Cloudflare
3. Experience with Container Orchestration/Web Server Administration (ECS/Kubernetes, Load Balancing, Gunicorn, Flask)

Skills

• Analytical Thinking
• Communications Skills
• Development
• Problem Solving
• Python
• Software Engineering
• Team Collaboration