Principal Security Engineer

MLabs; España; A distancia; EUR 189.000 - 259.000; Jornada completa

Descripción de la vacante

A leading blockchain company is seeking a Principal Security Engineer to lead security design and development across their platform. The ideal candidate should have over 10 years of experience in security engineering, strong expertise in application security, and be proficient in TypeScript and cryptography. The role is remote-first with a highly competitive salary range of $220K - $300K.

Servicios

Highly competitive salary

Generous equity package (150–300 stock options)

Comprehensive Healthcare and 401K

MacBook Pro and essential equipment

Formación

• 10+ years of experience in security engineering.
• Strong expertise in fintech or blockchain.
• Proficient in secure coding practices.

Responsabilidades

• Lead security architecture and set priorities.
• Drive threat modeling and vulnerability management.
• Design and implement security controls across environments.

Conocimientos

Leadership in security engineering

Application security expertise

Proficient in TypeScript

Knowledge of cryptography

Descripción del empleo

Principal Security Engineer - Blockchain Wallet Infrastructure

Location: Remote - Location: US or EU (remote-first, office optional). Must be in the US, not Canada or in the European Union. France or Paris or as close as possible, always preferred

Compensation: $220K - $300K

Join a stellar team of leaders and experts in blockchain technology, cryptography, and infrastructure to build the backbone of blockchain wallet infrastructure for the next financial era. We are hiring a Principal Security Engineer to lead security design and development across our entire platform. Reporting directly to the CISO, you will set the strategy to protect our high-stakes financial systems, fix vulnerabilities, and keep client wallets safe.

This is a strategic and highly technical role spanning the full security lifecycle. You will make security part of every layer of the stack, from architecture design to incident response. Beyond defense, you will champion secure development practices, mentor engineers, and represent the company's security posture to clients and the wider community.

Responsibilities

• Security Leadership: Lead security architecture, setting priorities and ensuring secure, reliable delivery across the platform.
• Vulnerability Management: Drive threat modeling, vulnerability management, and coordinate both internal and external penetration testing efforts.
• Secure Software Development: Conduct and oversee security reviews (code, design, architecture), and build frameworks for automated security testing and SSDLC enforcement within CI / CD pipelines.
• Defense & Controls: Design and implement defense-in-depth security controls across application, infrastructure, and cloud environments (AWS).
• Incidence & Threat Management: Monitor and respond to emerging threats (including supply chain risks), manage the bug bounty program, and coordinate security releases.
• Compliance & Representation: Ensure compliance with industry standards (ISO 27001, SOC 2, etc.), and represent the company in client discussions, audits, and at security conferences.
• Mentorship: Mentor engineers on secure coding, incident response, and security best practices.

Requirements

• Experience: 10+ years of experience in security engineering, with significant leadership experience in fintech or blockchain.
• Security Expertise: Strong expertise in application security, smart contract security, and cryptography.
• Testing Proficiency: Deep understanding of pentesting, static / dynamic testing, and vulnerability management.
• Systems Knowledge: Hands‑on experience with secure networking, cloud security (AWS), and software supply chains.
• Languages: Proficient in TypeScript and Rust (or similar systems languages) with secure coding expertise.
• Standards & Compliance: Familiarity with industry standards and frameworks (ISO 27001, NIST, CIS, SOC 2, etc.).
• Protocols: Strong knowledge of network and web protocols, applied cryptography, and PKI.
• Process: Experience integrating security into CI / CD pipelines and observability systems.
• Communication: Clear communicator who can explain complex security concepts to both technical and business stakeholders.

Benefits

• Compensation: Highly competitive salary range of $220,000–$300,000 per year.
• Equity: Generous equity package (150–300 stock options vested over 4 years).
• Location: US or EU (Remote‑First), with optional office space.
• Health & Retirement: Comprehensive Healthcare, 401K, and coverage for travel expenses.
• Equipment: Provided with a MacBook Pro + essential equipment.
• Impact: Define the security strategy for mission‑critical blockchain infrastructure, working directly with the CISO.

Due to the high volume of applications we anticipate, we regret that we are unable to provide individual feedback to all candidates. If you do not hear back from us within 4 weeks of your application, please assume that you have not been successful on this occasion. We genuinely appreciate your interest and wish you the best in your job search.

Commitment to Equality and Accessibility

At MLabs, we are committed to offer equal opportunities to all candidates. We ensure no discrimination, accessible job adverts, and providing information in accessible formats. Our goal is to foster a diverse, inclusive workplace with equal opportunities for all. If you need any reasonable adjustments during any part of the hiring process or you would like to see the job‑advert in an accessible format please let us know at the earliest opportunity by emailing human‑[e-mail].

MLabs Ltd collects and processes the personal information you provide such as your contact details, work history, resume, and other relevant data for recruitment purposes only. This information is managed securely in accordance with MLabs Ltd’s Privacy Policy and Information Security Policy, and in compliance with applicable data protection laws. Your data may be shared only with clients and trusted partners where necessary for recruitment purposes. You may request the deletion of your data or withdraw your consent at any time by contacting [e-mail].