Security Engineer

cyber; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first global workforce + NY офf

Professional reimbursement program (f…

Medical, dental & vision coverage (US)

401k retirement plan + company match (

Wellness stipend

Home office set up / ergonomic设备

Job summary

Offchain is building the future of decentralized applications with a focus on security and scalable cloud infrastructure. As a Security Engineer, you will define and improve our cloud security posture and collaborate across teams to ensure operations are secure and compliant with SOC2 and other standards.

You will design secure cloud-native architectures, strengthen CI/CD pipelines, and educate developers on risk-aware practices while partnering with engineers, infrastructure, and product teams

Qualifications

• 5+ years in a security engineering role.
• Strong AWS and cloud security expertise.
• Experience with Kubernetes and secret management tools (Vault/KMS).
• Familiarity with SOC 2, ISO 27001, NIST CSF.
• Ability to perform threat modelling and security testing.
• Excellent written and verbal communication.

Responsibilities

• Define and improve cloud security posture and collaborate across teams.
• Design secure cloud-native architectures and CI/CD pipelines.
• Enforce security best practices and harden systems across stack.
• Educate developers on risk-aware security controls.
• Work with engineering, infra, and product teams to align controls with business goals.

Skills

Cloud security

AWS

Kubernetes

Threat modelling

Security reviews

Security testing

Comm skills

SOC 2

Tools

Vault

KMS

Job description

At Offchain, we aren’t just building products: we’re leading a movement.

As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.

At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.

Why Offchain?

Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.

Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.

Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.

To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.

The Role

• As a Security Engineer at Offchain, you will play a key role in defining and improving our cloud security posture and collaborate across teams to ensure that our operations are secure, compliant, and aligned with regulatory and industry best practices - such as SOC2.

What you'll do:

• Leverage your extensive experience in Cloud Security to design, implement, and improve secure cloud-native architectures and CI/CD pipelines.
• Apply deep expertise in cloud infrastructure security to proactively identify risks, enforce best practices, and harden systems across the entire technology stack.
• Automate security controls and educate developers for future-proofing against vulnerabilities.
• Play an active part in designing and evolving the company’s overall information security governance and compliance program through: policies, standards, procedures, awareness.
• Work closely with engineering, infrastructure, and product teams to make sure controls fit both business objectives and technical realities.

What you'll need:

• 5+ years of experience in a security engineering role.
• Mastery of cloud infrastructure, particularly AWS.
• Prior experience focusing on infrastructure security and Kubernetes.
• Familiarity with secret management tools like Vault or KMS.
• Strong understanding of core information security concepts and major regulatory frameworks/standards (e.g. SOC2, ISO 27001, NIST CSF).
• Experience conducting security design reviews, threat modelling, and security testing.
• Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.

Perks:

• Remote-first global workforce + NY office
• Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
• Medical, dental & vision coverage (US + some other countries)
• 401k retirement plan + company match (US only)
• Wellness stipend
• Home office set up / ergonomic equipment program

Attention Offchain Job Seekers:

This role cannot be performed in California, or Colorado.

At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.