Secure critical financial and blockchain systems by combining hands-on security analysis with engineering solutions that scale. In this role, you'll focus on proactively identifying risks across web applications, APIs, cloud environments, and blockchain integrations, ensuring resilience against evolving threats.
Key Responsibilities
- Conduct in-depth security assessments of applications, APIs, and cloud infrastructure to uncover potential weaknesses before exploitation.
- Design and implement security tooling in Go, Java, or Ruby to empower developers with secure coding practices and real-time feedback.
- Support blockchain development by evaluating security risks in Layer 1 and Layer 2 integrations, as well as smart contract interactions.
- Configure and optimize Web Application Firewalls and cloud-native security controls across AWS and GCP environments.
- Embed security into the software development lifecycle by building automated checks within CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins.
- Lead threat modeling sessions during feature design to identify and mitigate risks early in the development process.
- Track vulnerabilities from detection through resolution, coordinating with engineering teams to implement effective, lasting fixes.
- Strengthen organizational security posture through developer education and participation in incident response activities.
What You Bring
- Demonstrated experience in manual security testing and securing production-grade systems.
- Strong understanding of OWASP Top 10, API security risks, and common vulnerability patterns (CWE).
- Proven background integrating security automation into CI/CD workflows.
- Familiarity with cloud security on AWS or GCP, including IAM policies, network isolation via VPCs, and WAF configuration.
- Proficiency in at least one of the following languages: Go, Java, or Ruby.
Impact
You’ll help maintain the integrity of systems that power next-generation financial services. By building secure, scalable infrastructure and enabling secure development practices, you contribute directly to protecting digital assets, customer funds, and sensitive financial data in a rapidly evolving technological landscape.
