Blockchain DevSecOps Engineer: Cloud Security & Automation

Index Industries; Chicago (IL); On-site; USD 160,000 - 200,000; Full time

Job summary

Index Industries, a blockchain fintech startup in stealth mode, seeks a DevSecOps Engineer to embed security into every stage of the development pipeline. You will design secure CI/CD, perform smart contract reviews, and protect cloud infra on AWS/GCP while enabling secure-by-default coding across our Kubernetes deployments.

The role emphasizes security in a fintech context with on-chain threats monitoring and incident response planning, offering a high-impact opportunity in a growing team.

Qualifications

• 4+ years in security engineering or DevSecOps.
• At least 1 year in a blockchain/Web3 context.
• Hands-on with smart contract auditing tools (Slither, MythX, Echidna) or willing to ramp quickly.
• Proficiency in Python, Go, or Solidity for scripting and tooling.
• Strong cloud security knowledge (AWS or GCP), Docker and Kubernetes.
• Certifications (CISSP, CEH, AWS Security Specialty) are nice to have, not required.

Responsibilities

• Design and maintain CI/CD pipelines with integrated SAST, DAST, and SCA tooling.
• Conduct threat modeling, vulnerability assessments, and smart contract security reviews.
• Build automated security controls across AWS/GCP infrastructure (IAM, secrets management, network policies).
• Monitor for incidents, anomalies, and on-chain threats; develop response playbooks.
• Own container and Kubernetes security hardening.
• Partner with engineering on secure-by-default coding practices.
• Ensure compliance with SOC 2, GDPR, and applicable financial security frameworks.

Skills

Security engineering

Blockchain/Web3

CI/CD security

Threat modeling

Cloud security

Container security

Tools

Slither

MythX

Echidna

Python

Go

Solidity

AWS

GCP

Docker

Kubernetes

Gnosis Safe

Job description

Index Industries, a blockchain fintech startup in stealth mode, seeks a DevSecOps Engineer to embed security into every stage of the development pipeline. You will design secure CI/CD, perform smart contract reviews, and protect cloud infra on AWS/GCP while enabling secure-by-default coding across our Kubernetes deployments.

The role emphasizes security in a fintech context with on-chain threats monitoring and incident response planning, offering a high-impact opportunity in a growing team.