Lead Security Engineer

Paxos Labs; New York (NY); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Competitive salary

Ownership structures

Continuous learning

Dynamic team environment

Job summary

Paxos Labs, located in New York City, is seeking a Lead Security Engineer dedicated to enhancing the company's security capabilities. The role involves conducting internal audits of cloud platforms and collaborating with engineers to mitigate security vulnerabilities. Candidates must have deep knowledge of cloud security, smart contracts, and operational security. The position offers impactful work within a pioneering team in the financial innovation sector, focusing on growth and competitive compensation.

Qualifications

• Deep knowledge of cloud infrastructure and web2 security practices.
• Deep knowledge of cybersecurity standards and social engineering defenses.
• Experience building full stack applications.
• Deep knowledge of the EVM security tooling, testing, and best practices.
• Deep knowledge of common hacks and exploits in DeFi protocols.
• Deep knowledge of financial attack vectors in DeFi protocols.
• Experience with CTFs, bug bounties, whitehat activities.

Responsibilities

• Conduct internal audits of Cloud (Azure, AWS) platform security.
• Create threat models for software, research vulnerabilities, and patch them.
• Collaborate closely with infrastructure engineers to prevent exploits.
• Develop tooling and SOPs like incident response manuals.
• Conduct periodic incident response training for team members.
• Collaborate closely to secure non-code related attack vectors.
• Conduct internal audits and set up secure operational practices.

Skills

Cloud Security

Smart Contract Security

Operational Security

Cybersecurity standards

Full stack application development

Job description

Who we are

Paxos Labs builds enterprise infrastructure that powers the next generation of trusted onchain financial products. We work with the largest financial enterprises in the world to build transparent and verifiable onchain infrastructure that works for end users and everyday financial use cases. If you believe in bringing DeFi and digital assets to the mainstream, consider building your career at Paxos Labs.

We believe security is critical to our culture and long term success. We are hiring a Lead Security Engineer to help take Paxos Labs's security capabilities to the next level.

Who we're looking for

The engineering team at Paxos Labs deploys production software across the web2 and web3 stack, from smart contract protocols, DeFi integrations, and cloud infrastructure to public API/SDKs that requires a comprehensive security posture. We are looking for a motivated developer that can not only develop, but aptly research and deploy extensive knowledge across TradFi and DeFi to secure mission critical software.

Most importantly, we are looking for developers with interest in the following overlap:

1. Smart Contract Security

2. Cloud Security

3. Operational Security

Responsibilities

Cloud Security

• Conduct internal audits of Cloud (Azure, AWS) platform security and implement best practices around key management, network security, monitoring, etc.

• Create threat models for first party and third party software, research possible vulnerabilities and patch them.

• Collaborate closely with infrastructure engineers to detect, fix, and prevent future exploits by creating reusable tools and processes.

Operational Security

• Develop tooling and SOPs such as incident response manuals.

• Conduct periodic incident response training for team members. Simulating hacks, alerts, and social engineering vectors.

• Collaborate closely with both the technical and the non-technical staff to secure non-code related attack vectors and protect the weakest link i.e. the humans involved.

Smart Contract / DeFi Security

• Collaborate closely with the Smart Contract team to conduct internal audits and to set up secure operational practices for the development and maintenance of smart contract protocols..

• Build and deploy full stack tools for mitigating exploits and financial risks such as

  • Detecting malicious transactions in the mempool and automating pauses across the smart contracts deployed on multiple chains.

  • Defining invariants and detecting violations in realtime.

  • Integrating third party security software where necessary.

Qualifications

• Deep knowledge of cloud infrastructure and web2 security practices.

• Deep knowledge of cybersecurity standards and social engineering defenses.

• Experience building full stack applications.

• Deep Knowledge of the EVM security tooling, testing, and best practices

• Deep knowledge of common hacks and exploits in DeFi protocols.

• Deep knowledge of financial attack vectors in DeFi protocols.

• Experience with CTFs, bugbounties, whitehat activities.

Why join us?

Joining Paxos Labs means becoming part of a pioneering team at the forefront of financial innovation for the mass market. You will have the opportunity to:

• Build the Future: Play a critical role in transforming traditional enterprises with innovative crypto solutions.

• Do Impactful Work: Contribute to projects that have a tangible impact on the global financial landscape.

• Enable Personal Growth: Benefit from continuous learning and professional development in a rapidly evolving industry with an emphasis on personal career advancement.

• Receive Competitive Compensation: Receive a competitive salary and participate in directly in ownership structures that provide top‑line benefits.

• Join A Dynamic Team: Thrive in a fast‑paced, agile setting where your ideas are valued and your contributions are recognized.

Location

We are a heavily in‑person team working in New York City. We prize effective in‑person collaboration.