Senior Product & Infrastructure Security Engineer

Electric Capital; United States; À distance; USD 180 000 - 260 000; Plein temps

Résumé du poste

Squads, a fintech platform, seeks a senior security practitioner to own product and infrastructure security across Multisig, Altitude, Fuse, and related services. You’ll review designs, read code, and drive findings to verified closure, partnering with leadership and engineering leads.

You’ll build threat models, write security standards, and craft tooling to make the secure path the default as the team grows. This is a hands-on role requiring deep technical acumen.

Qualifications

• 8+ years in product security, application security, or security engineering with a software foundation.
• Ownership of threat modeling and architecture review for complex systems, with influence on design decisions.
• Track record of finding critical vulnerabilities in large production codebases (TypeScript, Rust, Go, Python).
• Experience building and running vulnerability management programs including CI/CD scanning.
• Deep expertise in IAM, secrets management, network controls, and container security on AWS or comparable providers.

Responsabilités

• Design & code review as a security reviewer in product and engineering discussions.
• Lead threat modeling and security design reviews for new products, features, and infrastructure changes.
• Perform hands-on secure code reviews across backend services, APIs, frontends, and Solana programs, focusing on authentication, authorization, and access control.
• Own lifecycle for findings from audits, pentests, code scanning, and bug bounty: triage, remediation tracking, and verification.

Connaissances

Threat modeling

Architecture reviews

Vulnerability management

LLM/agent-based review

AWS security

Solana programs (Rust/Anchor)

Audit collaboration

Written communication

Outils

SAST tooling

CI/CD security tooling

Description du poste

Squads, a fintech platform, seeks a senior security practitioner to own product and infrastructure security across Multisig, Altitude, Fuse, and related services. You’ll review designs, read code, and drive findings to verified closure, partnering with leadership and engineering leads.

You’ll build threat models, write security standards, and craft tooling to make the secure path the default as the team grows. This is a hands-on role requiring deep technical acumen.