Summary
What you’ll impact
Our company is seeking a security engineer to own operational and technical security responsibilities, reporting to the Head of Security. The role involves identity and access management, security reviews, bug bounty operations, AI security research, supply chain monitoring, penetration test coordination, and compliance documentation. The candidate must have a software engineering background with 5+ years experience and product security expertise.
Responsibilities
What you'll do
- Identity and access management: provisioning, lifecycle operations, and monitoring for critical changes
- Security reviews across our product portfolio: threat modeling, code review, fuzzing, and functional testing
- Day-to-day bug bounty operations: triage, remediation tracking, and escalation of high-severity findings
- AI security research and tooling: adversarial testing frameworks for agent controls, with a focus on reusable patterns
- Software supply chain monitoring: malicious package detection beyond standard CVE scanning
- External penetration test coordination: scoping, logistics, and post-engagement remediation tracking
- Compliance documentation and evidence gathering as requirements emerge
Requirements
What you’ll bring
- A software engineering background is essential: you've built production systems, and that foundation shapes how you approach security
- You've since moved into product security and are fluent in the full lifecycle: threat modeling, secure design review, whitebox code review, and vulnerability testing
- 5+ years of professional experience, with a meaningful portion in software engineering before transitioning into security
- Proficiency in at least one systems or backend language (Rust preferred; Go, C++, or Python also work). You will write code, build tooling, and read production codebases as a routine part of this role.
- Demonstrated experience in product or application security, not solely infrastructure- or compliance-focused roles
- Track record of building security tooling or automation from scratch
- Experience conducting or leading security reviews on production software systems
- Solid understanding of identity and access management concepts and tooling
- Genuine interest in AI security with the ability to build adversarial testing tooling
- A thoughtful approach to software supply chain risk beyond checkbox scanning
- Strong written communication: documentation is a real part of this job
- Comfortable with high ownership and working autonomously on a small team
- Experience in web3, crypto, or DeFi
- Bachelor's degree in Computer Science, Computer Engineering, or a related technical field