Security Engineer

OP Recruiting; New York (NY); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

100% health benefits

Professional development budget

Weekly meal allowances

Job summary

OP Recruiting is seeking an experienced Security Engineer to join a high-impact team focused on decentralized infrastructure. This fully remote role involves conducting security assessments, managing identity operations, and developing security automation tools. Ideal candidates must have at least 5 years of experience, proficiency in backend languages like Rust or Go, and expertise in the security lifecycle of Web3 or DeFi. The position includes a competitive compensation package and comprehensive health benefits.

Qualifications

• 5+ years of experience in software engineering, product, or application security.
• Proficient in at least one systems-level/backend language.
• Experience in security lifecycle in Web3, DeFi, or cryptocurrency.

Responsibilities

• Conduct security assessments across the product suite.
• Oversee identity operations lifecycle management.
• Design custom tooling for security automation.

Skills

Application Security

Identity & Access Management

Vulnerability Management

Security Automation

Communication Skills

Tools

Rust

Go

C++

Job description

Location: Remote / Distributed (Global)

About the Opportunity

We are seeking an experienced Security Engineer to join a high‑impact team building core decentralized infrastructure that processes billions in daily transaction volume. This role offers the chance to own a massive technical scope—ranging from hands‑on code reviews and threat modeling to building custom adversarial testing frameworks—within a fast‑moving organization that has already achieved significant product‑market fit. You will report directly to the Head of Security, playing a pivotal role in scaling security operations and protecting critical on‑chain ecosystems.

Responsibilities

• Application Security & Reviews: Conduct deep‑dive security assessments across the product suite, including white‑box code reviews, functional testing, fuzzing, and comprehensive threat modeling.
• Identity & Access Management: Oversee the full lifecycle of identity operations, including provisioning, monitoring for anomalous changes, and managing access for critical systems.
• Security Research & Automation: Design and build custom tooling for AI security and adversarial testing, focusing on reusable patterns for agent controls.
• Vulnerability Management: Lead the day‑to‑day operations of the bug bounty program, managing triage, remediation workflows, and high‑priority escalations.
• Supply Chain & Compliance: Implement advanced monitoring for software supply chain risks beyond standard scans and coordinate external penetration testing engagements.
• Strategic Defense: Manage software security documentation and evidence gathering to support evolving compliance and organizational requirements.

Requirements (Must‑have)

• Engineering Foundation: Strong background in software engineering with a transition into product or application security (5+ years of total professional experience).
• Programming Proficiency: Expertise in at least one systems‑level or backend language—such as Rust, Go, or C++—with the ability to read production code and build security tooling from scratch.
• Domain Expertise: Fluency in the full security lifecycle, including secure design reviews and vulnerability testing, specifically within Web3, DeFi, or cryptocurrency environments.
• Analytical Mindset: Demonstrated experience in building security automation and conducting rigorous reviews on live production systems.
• Communication: Exceptional written communication skills for technical documentation and cross‑team collaboration.

Preferred Qualifications (Nice‑to‑have)

• System Hardening: Proficiency in Linux administration, kernel‑level security primitives, and hardening environments.
• Key Management: Experience with multisig schemes, signing policy design, and hardware security modules (HSMs).
• Advanced Architecture: Familiarity with Trusted Execution Environments (TEEs), confidential computing, or secure enclave design.
• Infrastructure Management: Hands‑on experience with Enterprise IAM/SSO systems and Mobile Device Management (MDM) platforms.

Compensation & Benefits

• Highly competitive total compensation package including salary and multiple forms of equity.
• Fully covered (100%) health benefits for employees.
• Budget for professional development, including global team retreats and industry conferences.
• Weekly allowances for meals and remote work support.