Security Assurance Engineer

Chainlink Labs; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Chainlink Labs seeks a Security Assurance Engineer to strengthen security assurance capabilities through technical analysis, automation, and established security/compliance frameworks. The role focuses on scalable, evidence-driven assurance as Chainlink's technology evolves.

You will improve automation, streamline evidence collection, and enhance audit readiness while applying SOC 2, ISO 27001, and NIST CSF standards to bolster assurance reporting and reliability.

Qualifications

• 3+ years of experience in security engineering or related fields.
• Experience developing scripts and automations using Python.
• Experience with APIs, JSON, and Git to access and process data.
• Familiarity with SOC 2, ISO 27001, NIST CSF, CIS Controls or equivalent.

Responsibilities

• Develop and improve automated security assurance workflows that reduce manual effort and increase the consistency and reliability of assurance activities.
• Streamline the collection, processing, and analysis of security evidence across technical systems to improve audit readiness and control visibility.
• Enhance the efficiency and accuracy of access reviews, control testing, exception tracking, and risk assessments through technical automation.
• Improve the quality, traceability, and accessibility of security and compliance data to enable more reliable assurance reporting.
• Apply established security and compliance frameworks to strengthen the consistency and effectiveness of assurance processes.
• Identify opportunities to integrate AI-driven capabilities into assurance workflows to improve operational efficiency, accuracy, and quality.

Skills

Python scripting

APIs & JSON

Git

Security frameworks

Tools

GitHub

Okta

Wiz

Splunk

Job description

About Chainlink

Chainlink is the industry-standard oracle platform bringing the capital markets onchain and powering the majority of decentralized finance (DeFi). The Chainlink stack provides the essential data, interoperability, compliance, and privacy standards needed to power advanced blockchain use cases for institutional tokenized assets, lending, payments, stablecoins, and more. Since inventing decentralized oracle networks, Chainlink has enabled tens of trillions in transaction value and now secures the vast majority of DeFi.

Many of the world’s largest financial services institutions have also adopted Chainlink’s standards and infrastructure, including Swift, Euroclear, Mastercard, Fidelity International, UBS, S&P Dow Jones Indices, FTSE Russell, WisdomTree, ANZ, and top protocols such as Aave, Lido, GMX and many others. Chainlink leverages a novel fee model where offchain and onchain revenue from enterprise adoption is converted to LINK tokens and stored in a strategic Chainlink Reserve. Learn more at chain.link.

About the Role

As a Security Assurance Engineer, you will strengthen Chainlink's security assurance capabilities through technical analysis, automation, and the application of established security and compliance frameworks. The role focuses on improving the efficiency, accuracy, and reliability of security assurance processes by connecting technical systems, structured data, and compliance requirements. You will contribute to a more scalable, evidence-driven approach to security assurance as Chainlink's technology and operations evolve.

Your Impact

• Develop and improve automated security assurance workflows that reduce manual effort and increase the consistency and reliability of assurance activities.
• Streamline the collection, processing, and analysis of security evidence across technical systems to improve audit readiness and control visibility.
• Enhance the efficiency and accuracy of access reviews, control testing, exception tracking, and risk assessments through technical automation.
• Improve the quality, traceability, and accessibility of security and compliance data to enable more reliable assurance reporting.
• Apply established security and compliance frameworks to strengthen the consistency and effectiveness of assurance processes.
• Identify opportunities to integrate AI-driven capabilities into assurance workflows to improve operational efficiency, accuracy, and quality.

Requirements

• 3+ years of experience in security engineering, cloud security, security assurance, technology risk, or technical compliance.
• Demonstrated hands-on experience developing scripts and automations using Python or a comparable programming language.
• Experience working with APIs, JSON, Git, and structured datasets to access, process, and manage technical information.
• Working knowledge of established security and compliance frameworks, such as SOC 2, ISO 27001, NIST CSF, CIS Controls, or comparable standards.

Preferred Requirements

• Experience working with enterprise security and compliance platforms such as GitHub, Okta, Wiz, Splunk, Jamf, Anecdotes, or comparable technologies.
• Built or improved automated assurance workflows involving evidence collection, user access reviews, control testing, exception tracking, risk assessments, or audit reporting.
• Demonstrated experience integrating AI tools into security assurance or engineering workflows, with measurable improvements in efficiency, accuracy, or quality.
• Experience operating in blockchain, Web3, fintech, financial services, or other highly regulated technology environments.
• Familiarity with threat modeling, application security, software supply-chain security, or incident response through previous technical or assurance work.
• Relevant professional certifications, such as AWS Certified Security – Specialty, CISSP, CISA, CCSP, or ISO 27001 Lead Implementer/Auditor.

Chainlink Labs is a remote-first organization and employment eligibility is contingent upon residing in an approved hiring jurisdiction. Team members may work outside their primary country of legal residence for a maximum of 90 days per calendar year. Please discuss your current location, legal residence, and work authorization with your recruiter during your initial conversation. Unless otherwise stated for a specific role, we require working hours that overlap with Eastern Time (ET).

We carefully review all applications and aim to provide a response to every candidate within two weeks after the job posting closes. The closing date is listed on the job advert, so we encourage you to take the time to thoughtfully prepare your application. We want to fully consider your experience and skills, and you will hear from us regarding the status of your application shortly after the closing date.

Commitment to Equal Opportunity

Chainlink Labs is an equal opportunity employer. All qualified applicants will receive equal consideration for employment in compliance with applicable laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us via this form.

Global Data Privacy Notice for Job Candidates and Applicants

Information collected and processed as part of your Chainlink Labs Careers profile, and any job applications you choose to submit, is subject to our Recruiting Privacy Policy. By submitting your application, you are agreeing to our use and processing of your data as required.