Security Engineer

Role overview Join a small security team at a regulated infrastructure company that provides custodial wallets, global payment orchestration, and stablecoin issuance. As the second security engineer, you will scale an established program across infrastructure, product and application security, detection and response, and the technical side of GRC, writing production code most of the time.

Responsibilities - Write production Go code for security tooling, middleware, and libraries that engineering teams can drop into any service - Contribute security feedback to engineering design docs and serve as security reviewer on new product features and architecture changes - Own at least one security domain end-to-end, such as Kubernetes and cloud hardening, application security in CI, or detection engineering - Write and tune detections as code, add new telemetry sources, and reduce alert noise across cloud, Kubernetes, identity, endpoint, and SaaS telemetry - Expand Kubernetes and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection - Drive multi-quarter initiatives such as default-deny service-to-service networking, just-in-time access, and security policy evaluation - Deliver control automation and evidence for active audit and regulatory workstreams, including SOC 1, SOC 2, and other applicable frameworks

Requirements - Must be a strong Go programmer able to write, review, and ship production code - Hands-on experience with Kubernetes (EKS preferred), AWS, Terraform, and cloud-native architectures - Familiarity with building reusable security building blocks such as authorization, tenant isolation, request signing, and input validation - Comfort working in a fast-paced startup environment where work changes quickly and ownership is expected from week one - Experience participating in incident response and on-call rotations - Ability to turn regulatory and compliance requirements into engineered, tested, continuously evidenced controls

Nice to have - Experience supporting bug bounty programs and data loss prevention rollouts - Background in detection engineering and SIEM pipelines - Familiarity with regulated environments and financial services compliance (SOC 1, SOC 2, applicable digital asset frameworks)

Benefits and work setup - Remote within the US; preference for candidates in NYC or open to relocation - Approximately 40-person company where your work directly protects users and partners - Equal opportunity employer with E-Verify participation