Senior Product & Infrastructure Security Engineer

Deciml; United States; Hybrid; USD 180,000 - 260,000; Full time

Job summary

Deciml, a Solana-native financial infrastructure company, seeks a senior, hands-on product and infrastructure security leader who will shape architecture and security tooling across the product suite and the shared infrastructure.

You will own threat modeling, secure code reviews, audits, and bug-bounty lifecycle, partnering with the Head of Security, CTO, and engineering leads to raise the security baseline while keeping velocity.

Qualifications

• 8+ years in product security, application security or security engineering, built on a software engineering foundation.
• Ownership of threat modeling and architecture review for complex financial or distributed systems.

Responsibilities

• Join product and engineering calls as the security reviewer, raising concerns while designs are still cheap to change.
• Lead threat modeling and security design reviews for new products, features and infrastructure changes.
• Perform hands-on secure code review across backend services, APIs, frontends and Solana programs, focused on authn, authz and access control.
• Own the full lifecycle for findings from audits, pentests, code scanning and bug bounty: triage, prioritisation, remediation tracking and fix verification.
• Set severity and SLA standards and hold the team to them; run bug bounty intake and validate external reports against source.
• Tune and extend SAST, dependency, secrets and container scanning in CI/CD so engineers trust the signal.
• Review IAM, network controls, encryption and secrets management across cloud environments, including API key ownership, permissions and rotation.
• Assess what internal AI tools, MCP integrations and agents can reach in production, and scope their access.
• Define product security standards, review checklists and developer guidance that scale with the team.

Skills

Threat modeling

Security design reviews

Secure code review

Vulnerability management

LLMs & agent workflows

CI/CD security tooling

IAM & secrets management

Cloud security (AWS)

Technical communication

Tools

SAST

Dependency scanning

Secrets management tooling

Container security scanning

Code review tooling

Job description

Deciml, a Solana-native financial infrastructure company, seeks a senior, hands-on product and infrastructure security leader who will shape architecture and security tooling across the product suite and the shared infrastructure.

You will own threat modeling, secure code reviews, audits, and bug-bounty lifecycle, partnering with the Head of Security, CTO, and engineering leads to raise the security baseline while keeping velocity.