Senior Security Engineer

Gauntlet; New York (NY); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Remote work from anywhere in the US and Canada

100% paid medical, dental, and vision

$1,000 WFH stipend

Unlimited vacation

Job summary

Gauntlet is looking for a Security Engineer to enhance application security and operational resilience. The role entails threat modeling, security assessments, and automating security processes. With your hands-on experience, you will drive security initiatives across teams.

Alongside challenging tasks, we offer remote work within the US and Canada, 100% paid medical, dental, and vision premiums, and unlimited vacation. Ideal candidates will have a proven track record in security engineering and effective communication skills.

Qualifications

• 5+ years in hands-on security engineering.
• Proficiency in security assessments and controls.
• Familiarity with AI tools and automation.

Responsibilities

• Threat model new product features and harden systems.
• Operate application security toolchain.
• Own day-to-day security operations.
• Triage vulnerability findings and resolve issues.
• Automate security tasks with AI.

Skills

Hands-on security engineering

Technical security assessments

Proficiency in Python, TypeScript, or JavaScript

Experience with AI and LLMs

Clear communication

Job description

About Gauntlet

Gauntlet builds the financial systems of the future. While much of onchain finance is focused on point solutions, we operate across the entire stack to offer best‑in‑class vault products. Today we serve over $1.5B in client TVL across some of the largest fintechs, neobanks, protocols, exchanges, and capital allocators in crypto – and increasingly, traditional asset management. Our team brings together traditional finance and crypto‑native expertise to deliver durable, sophisticated products for institutional clients moving onchain.

What you’ll do

• Threat model new product features and integrations and harden systems with effective controls.
• Operate and evolve the application security toolchain and keep it high‑signal for developers.
• Own day‑to‑day security operations across the detection stack (EDR, SIEM, on‑chain monitoring, identity, cloud): triage what fires, resolve what matters, and reduce noise.
• Triage vulnerability and bug‑bounty findings by real exposure, drive remediation, and support incident response end to end.
• Take security tooling and projects from evaluation through org‑wide rollout, collaborating across engineering, infra, and other teams.
• Automate repetitive, judgment‑light security work with AI: vulnerability and AppSec workflows, access reviews, SOC 2 and audit evidence collection, vendor due diligence, and recurring reporting.
• Build reusable AI components, Claude skills, and agents that engineering and other functions can adopt.

What you bring

• 5+ years in hands‑on security engineering spanning product or application security and security operations.
• Track record of technical security assessments of software and systems, including system hardening, security policy analysis, and implementing effective controls.
• An adversarial mindset: you think like an attacker and pressure‑test assumptions, including your own.
• Proficiency in Python, TypeScript, or JavaScript, working with Claude Code, Codex or similar AI tools.
• Hands‑on experience applying AI and LLMs to automation and building reusable tooling or components that other engineers adopted.
• Experience owning security projects end to end, from vendor selection through org‑wide rollout, across multiple teams.
• Experience securing high‑value or high‑throughput transaction systems.
• Clear communication: you explain risk plainly and drive findings to closure.

Bonus points

• Crypto/blockchain security experience.

Benefits & perks

• Remote first – work from anywhere in the US and Canada.
• Regular in‑person company retreats and cross‑country “office visit” perk.
• 100% paid medical, dental and vision premiums for employees.
• $1,000 WFH stipend.
• Monthly reimbursement for home internet, phone and cellular data.
• Unlimited vacation.
• 100% paid parental leave of 12 weeks.
• Fertility benefits.
• Opportunity for incentive compensation.