Senior Security Engineer Product and Infrastructure

You will own product and infrastructure security across backend services, APIs, frontends, Solana programs, and cloud environments. You will lead threat modeling and security design reviews, perform secure code reviews, manage vulnerabilities through verified remediation, improve CI/CD security scanning, and define scalable security standards and developer guidance.

Responsibilities

• Join product and engineering calls as the security reviewer
• Lead threat modeling and security design reviews for products, features, and infrastructure changes
• Perform secure code reviews across backend services, APIs, frontends, and Solana programs
• Manage the full vulnerability-finding lifecycle, including triage, prioritization, remediation tracking, and fix verification
• Set severity and SLA standards
• Run bug bounty intake, validate reports, coordinate with audit partners, and scope internal assessments
• Tune and extend SAST, dependency, secrets, and container scanning in CI/CD
• Review IAM, network controls, encryption, and secrets management across cloud environments
• Assess and scope production access for internal AI tools, MCP integrations, and agents
• Define product security standards, review checklists, and developer guidance

Requirements

• Have 8+ years of product security, application security, or security engineering experience built on a software engineering foundation
• Own threat modeling and architecture review for complex financial or distributed systems
• Demonstrate a track record of finding critical vulnerabilities in large production codebases using TypeScript, Rust, Go, or Python
• Have experience building and running a vulnerability management program or bug bounty, including CI/CD scanning
• Have deep expertise in IAM, secrets management, network controls, and container security on AWS or a comparable provider
• Have strong written communication and the judgment to work independently

Benefits

• Equity