Cybersecurity Engineer

P2P; Stamford (CT); On-site; USD 130,000 - 190,000; Full time

Job summary

Grayscale Investments is seeking a Cybersecurity Engineer to build, implement, and maintain security capabilities across our technology platforms.

You will be responsible for implementing security controls, automating security processes, and integrating security throughout the software development lifecycle across cloud infrastructure, enterprise applications, AI-enabled systems, and modern engineering platforms.

Qualifications

• 5+ years of experience in cybersecurity, security engineering, cloud security, application security, DevSecOps, or a related engineering discipline.
• Experience implementing security controls within cloud-native environments, preferably AWS.
• Strong understanding of identity and access management, data protection, network security, vulnerability management, monitoring, and incident response.
• Experience integrating security into software development workflows, including CI/CD pipelines and SSDLC.
• Strong programming and scripting capabilities (e.g., Python, Terraform) to automate and validate security controls.
• Experience with cloud infrastructure, Kubernetes, APIs, and modern application architectures.
• Experience with security tooling such as SIEM/SOAR, vulnerability management, cloud security, endpoint security, application security, or detection engineering platforms.
• Strong communication skills and ability to collaborate across engineering, infrastructure, product, and security teams.

Responsibilities

• Partner with engineering teams to implement security controls and secure design patterns across cloud infrastructure, enterprise applications, developer platforms, and AI-enabled systems.
• Build and operationalize security controls that protect sensitive data, including IAM, data protection, network security, logging, monitoring, and auditability.
• Participate in threat modeling, architecture reviews, and security assessments for applications, cloud platforms, and emerging technologies, identifying and mitigating risks prior to deployment.
• Implement and maintain security controls for cloud platforms, APIs, developer tooling, and third-party technologies.
• Build monitoring, detection, alerting, and incident response capabilities in partnership with engineering and security operations teams.
• Integrate security tooling and automation into CI/CD pipelines and cloud-native workflows using Infrastructure-as-Code and policy-as-code practices.
• Support SSDLC by partnering with engineering teams to embed security throughout the development lifecycle.
• Assess and mitigate technical and operational risks for cloud platforms, enterprise apps, AI-enabled systems, and third-party providers.
• Work with compliance, audit, and business stakeholders to ensure regulatory and governance requirements are met.
• Contribute to security standards, engineering patterns, automation, and operational best practices across the organization.
• Stay current on emerging threats and technologies to strengthen Grayscale's long-term security capabilities.

Skills

Security engineering

Cloud security

DevSecOps

SSDLC

Python

Terraform

Infrastructure as Code

AWS

Kubernetes

CI/CD

SIEM/SOAR

Threat modeling

Compliance

Tools

Terraform

Kubernetes

SIEM/SOAR

CI/CD tooling

Job description

Grayscale is the largest digital asset-focused investment platform in the world by AUM and offers the broadest selection of digital asset investment products in the U.S. based on number of products.

Our platform spans the full spectrum of institutional-grade solutions-from single-asset exposures to diversified and thematic strategies with a goal of providing every investor with access to the hyper-expanding digital asset universe. Our firm offers a rare combination of decades of traditional finance work experience and digital asset leadership that brings an institutional mindset to the maturing digital asset industry. This convergence of capabilities positions us to deliver investment solutions and client experiences that are both institutionally robust and technologically advanced, which we believe offers a competitive edge that is difficult to replicate.

We're proud of our deep crypto expertise and work closely with individual and institutional investors as they explore this asset class as part of their portfolio allocation.

Position Summary

Grayscale Investments is seeking a Cybersecurity Engineer to build, implement, and maintain security capabilities across our technology platforms.

You will be responsible for implementing security controls, automating security processes, and integrating security throughout the software development lifecycle across cloud infrastructure, enterprise applications, AI-enabled systems, and modern engineering platforms. This role is instrumental in ensuring Grayscale's technology environment remains secure, resilient, scalable, and aligned with regulatory expectations.

Working closely with engineering, product, and compliance teams, you will help embed secure-by-design principles into technology solutions, strengthen cloud and application security, improve detection and monitoring capabilities, and support the secure adoption of emerging technologies across Grayscale.

Responsibilities:

• Partner with engineering teams to implement security controls and secure design patterns across cloud infrastructure, enterprise applications, developer platforms, and AI-enabled systems.
• Build and operationalize security controls that protect sensitive data, including identity and access management, data protection, network security, logging, monitoring, and auditability.
• Participate in threat modeling, architecture reviews, and security assessments for applications, cloud platforms, and emerging technologies, identifying and mitigating security risks before deployment.
• Implement and maintain security controls for cloud platforms, APIs, developer tooling, and third-party technologies.
• Build monitoring, detection, alerting, and incident response capabilities in partnership with engineering and security operations teams.
• Integrate security tooling and automation into CI/CD pipelines and cloud-native engineering workflows using Infrastructure-as-Code and policy-as-code practices.
• Support secure software development by partnering with engineering teams to embed security throughout the Secure Software Development Lifecycle (SSDLC).
• Assess and mitigate technical and operational risks associated with cloud platforms, enterprise applications, AI-enabled systems, and third-party providers.
• Partner with compliance, audit, and business stakeholders to ensure technology solutions meet regulatory, control, and governance requirements.
• Contribute to the development of security standards, engineering patterns, automation, and operational best practices across the organization.
• Stay current on emerging security threats, technologies, and industry best practices while helping strengthen Grayscale's long-term security capabilities.

Qualifications:

• 5+ years of experience in cybersecurity, security engineering, cloud security, application security, DevSecOps, or a related engineering discipline.
• Experience implementing security controls within cloud-native environments, preferably AWS.
• Strong understanding of security fundamentals including identity and access management, data protection, network security, vulnerability management, monitoring, and incident response.
• Experience integrating security into software development workflows, including CI/CD pipelines and Secure Software Development Lifecycle (SSDLC) practices.
• Strong programming and scripting capabilities (e.g., Python, Terraform, Infrastructure-as-Code) with the ability to automate and validate security controls.
• Experience with cloud infrastructure, Kubernetes, APIs, and modern application architectures.
• Experience with security tooling such as SIEM/SOAR, vulnerability management, cloud security, endpoint security, application security, or detection engineering platforms.
• Experience conducting threat modeling, security assessments, and architecture reviews for modern applications and cloud platforms.
• Familiarity with AI/ML systems, including LLMs and AI-enabled application architectures, is a plus.
• Experience operating in regulated environments with strong control, audit, and compliance requirements, preferably within financial services.
• Strong communication skills with the ability to collaborate effectively across engineering, infrastructure, product, and security teams to solve complex technical challenges.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.