Security Engineer: Onchain Systems & AI Defense

Allium; Oregon; Hybrid; USD 120,000 - 170,000; Full time

Job summary

Allium is seeking a Security Engineer to design and operate controls securing our infrastructure, applications, employee systems, and AI usage. You will collaborate with engineering leadership to investigate threats, implement fixes, and automate security workflows.

The role combines hands-on coding with threat detection and remediation across humans and machines. You will help secure agent-driven workflows, enforce least privilege, and strengthen defenses against credential theft and

Responsibilities

• Secure cloud infrastructure and access.
• Implement least privilege, phishing-resistant authentication, short-lived credentials, controlled privileged access, and reliable provisioning and deprovisioning. Improve cloud configuration, managed credential storage, and network protections with service owners. Improve secrets scanning and prevent credentials from entering source control.
• Secure AI agents and developer tools. Help implement permissions, execution isolation, network restrictions, and audit trails for coding assistants, agents, and tool integrations, including MCP. Test how untrusted content could trigger prompt injection, tool misuse, or unintended data access, and build safeguards at the point where actions execute.
• Build detection and response. Correlate identity, cloud, workload, and CI/CD telemetry to detect credential theft, unusual access, unauthorized agent actions, suspicious software changes, and data exfiltration. Investigate attacks across systems, reduce alert noise, and test response procedures with system owners, including session revocation, exposed-credential rotation, and removal of unauthorized access.
• Reduce software supply-chain risk. Assess dependencies, CI/CD workflows, third-party integrations, and developer environments. Partner with engineers to

Job description

Allium is seeking a Security Engineer to design and operate controls securing our infrastructure, applications, employee systems, and AI usage. You will collaborate with engineering leadership to investigate threats, implement fixes, and automate security workflows.

The role combines hands-on coding with threat detection and remediation across humans and machines. You will help secure agent-driven workflows, enforce least privilege, and strengthen defenses against credential theft and