Security Engineer: Harden AI-Driven Onchain Infra

Allium; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Allium, a leader in on‑chain finance security, is hiring a Security Engineer to design and operate controls protecting its infrastructure, applications, and employee systems. You will secure AI agents, automate security tasks, and drive hardened defense across cloud, CI/CD, and developer tools.

You will partner with engineering and security leadership to investigate threats, implement fixes, and strengthen defenses against automated attacks and compromised dependencies.

Qualifications

• Typically 4+ years of security, infrastructure, or software engineering experience with hands-on security controls.
• Experience with a major cloud platform and strong foundations in identity, networking, OS, and access control.
• Breadth in at least two areas such as cloud security, detection/response, application security, or vulnerability management.

Responsibilities

• Secure cloud infrastructure and access with least privilege, short‑lived credentials, and strong provisioning controls.
• Secure AI agents and developer tools with permissions, isolation, network restrictions, and audit trails.
• Build detection and response by correlating telemetry to identify credential theft, unusual access, and data exfiltration.
• Reduce software supply-chain risk by evaluating dependencies and protecting build/deployment credentials.
• Move quickly on threats by monitoring services, evaluating vulnerabilities, and applying compensating controls.
• Automate and document security work, using code and APIs for reviews, checks, and remediation tracking.
• Support employee security and enterprise assurance with endpoint protections and audit-ready evidence.

Skills

Security engineering

Cloud security

Identity and access control

Threat detection & response

Vulnerability management

Security tooling & automation

Job description

Allium, a leader in on‑chain finance security, is hiring a Security Engineer to design and operate controls protecting its infrastructure, applications, and employee systems. You will secure AI agents, automate security tasks, and drive hardened defense across cloud, CI/CD, and developer tools.

You will partner with engineering and security leadership to investigate threats, implement fixes, and strengthen defenses against automated attacks and compromised dependencies.