Apply on Employer Site

Ramp · 3 weeks ago

Senior Security Analyst | Corporate Security

New York, NY (HQ)

Full-time

Hybrid

Mid, Senior Level

$160K/yr - $221K/yr

3+ years exp

Ramp is a financial operations platform rethinking how modern finance teams function in the age of AI. As a Senior Security Analyst (Corporate Security), you will own and scale core security programs across identity, endpoints, SaaS, and data, ensuring secure rollout of AI capabilities while managing insider risk and compliance with security frameworks.

FinanceFinancial ServicesFinTech

No H1B

U.S. Citizen Only

Responsibilities

Own core enterprise security programs

Secure SaaS at scale

Run sovereign / FedRAMP-aligned environments

Modernize identity & access

Harden endpoints and network

Measure, review, and improve

Automate and simplify

Partner & communicate

Qualification

Insider RiskData Loss Prevention (DLP)SaaS SecurityEndpoint SecurityOkta AdministrationGoogle WorkspaceEDR ToolsMDM ToolsSecurity FrameworksScriptingCollaboration SkillsCommunication Skills

Required

3+ years in enterprise/corporate security engineering or operations, with hands-on ownership of security controls for identity, endpoints, SaaS, or data

U.S. citizenship is required for this role due to the nature of our sovereign / FedRAMP-aligned environments

Practical experience implementing and tuning Insider Risk, DLP, SaaS posture, or endpoint security in a cloud-first environment

Hands-on administration of a modern identity provider and collaboration suite—Okta and Google Workspace are ideal, but similar experience (e.g., Azure AD / Entra ID, Microsoft 365) is highly relevant

Familiarity with tools and concepts like EDR, MDM, SSPM/CASB, DSPM, and ZTNA/SSE, and experience hardening macOS and/or Windows at scale

Experience aligning controls to at least one security framework or regulated environment (e.g., FedRAMP, NIST 800-53/171, SOC 2, ISO 27001) and translating requirements into practical enterprise controls

You can spot gaps, design pragmatic remediations, and drive them to completion across multiple teams

You're comfortable using automation (scripts, workflows, or low-code tools) to make security more scalable and less manual

You communicate clearly—whether you're writing a runbook, summarizing risk tradeoffs, or explaining a control choice to non-security partners

You enjoy partnering with IT and Engineering to get things shipped, not just documented