security engineer in onchain finance

Allium; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Equity / stock options

401(k) plan

Paid time off

Job summary

Allium ищет специалиста по кибербезопасности для улучшения и защиты облачной инфраструктуры. Ваша работа будет включать внедрение принципов минимальных привилегий, защиту учетных данных и контроль доступа, а также проактивное тестирование на уязвимости и аудит систем.

Кандидат должен обладать опытом в области облачной безопасности, сетей и операционных систем, уметь работать с командами инженеров и бизнес-стейкхолдерами, обеспечивая безопасность на протяжении всего цикла разработки.

Qualifications

• 4+ лет опыта в области безопасности, инфраструктуры или разработки, ответственность за внедрение защитных контролей.
• Опыт работы с крупной облачной платформой; базовые знания идентификации, сетей, ОС и контроля доступа.
• Глубокая экспертиза в как минимум двух направлениях: безопасность облака, обнаружение и реагирование, безопасность приложений, управление уязвимостями, корпоративная безопасность.

Responsibilities

• Обеспечение безопасности облачной инфраструктуры и доступа на основе принципа наименьших привилегий.
• Улучшение конфигураций облака, хранения учетных данных и сетевых защит; предотвращение попадания секретов в исходный код.
• Разработка и внедрение аудита, мониторинга и реакции на инциденты; корреляция данных по идентификации, облаку и CI/CD.

Skills

Cloud security

Identity management

Networking basics

Incident response

Job description

Описание:

Allium ingests, verifies, and standardizes data across more than 140 blockchains and 30 petabytes of history. It provides a canonical data layer for onchain finance, serving financial, engineering, product, strategy, research, and executive teams, as well as AI agents.

Задачи:

Secure cloud infrastructure and access by implementing least privilege, phishing-resistant authentication, short-lived credentials, controlled privileged access, and reliable provisioning and deprovisioning Improve cloud configuration, managed credential storage, network protections, and secrets scanning, and prevent credentials from entering source control Secure AI agents and developer tools by implementing permissions, execution isolation, network restrictions, and audit trails, including for MCP integrations Test how untrusted content could trigger prompt injection, tool misuse, or unintended data access, and build safeguards where actions execute Build detection and response by correlating identity, cloud, workload, and CI/CD telemetry to detect credential theft, unusual access, unauthorized agent actions, suspicious software changes, and data exfiltration Investigate attacks across systems, reduce alert noise, and test response procedures with system owners, including session revocation, exposed-credential rotation, and removal of unauthorized access Reduce software supply-chain risk by assessing dependencies, CI/CD workflows, third-party integrations, and developer environments Partner with engineers to validate findings, protect build and deployment credentials, and remediate vulnerabilities Monitor internet-facing services, including developer tools and management interfaces, and evaluate new vulnerabilities and active exploitation against actual exposure Help service owners patch, isolate, revoke credentials, or apply compensating controls, then verify that the response worked Automate and document access reviews, configuration checks, evidence collection, and remediation tracking using code and APIs Use AI thoughtfully for security work, validate its output, and protect sensitive data Deploy, validate, and maintain endpoint protections and device security baselines, including prevention settings, tamper protection, encryption, and timely updates Work with the employee IT owner on identity and SaaS controls Provide technical evidence for audits and customer reviews, and maintain useful runbooks

Требования:

Typically 4+ years of relevant security, infrastructure, or software engineering experience, with direct responsibility for implementing security controls Hands-on experience with a major cloud platform and a strong foundation in identity, networking, operating systems, and access control Depth in at least two relevant areas, such as cloud security, detection and response, application security, vulnerability management, or corporate security Experience investigating technical problems using logs and system behavior, testing hypotheses, and following issues through to resolution Clear communication, practical judgment, and constructive working relationships with engineers and business teams

Условия:

Medical, dental, vision, life, and AD&D insurance; US employees receive 100% coverage for Gold plans and 80% for dependents Meaningful early-stage equity; every full-time employee receives a stock option grant Flexible, trust-based paid time off; policies in every hiring country meet or exceed local statutory vacation requirements Company-sponsored 401(k) plan in the US