Senior Security Engineer - AI & Product Security Lead

SOLANA FOUNDATION; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Token incentives

Job summary

Solana Foundation in the United States seeks a security-focused engineer to own a broad operational and technical scope, reporting to the Head of Security. You will triage access requests, conduct security reviews, and build testing frameworks with a focus on AI security and supply-chain risk.

You will work remotely with a small team, writing security tooling and contributing to production security reviews across the Solana ecosystem.

Qualifications

• A software engineering background and production systems experience.
• Experience in product security lifecycle: threat modeling, secure design reviews, whitebox code reviews, and vulnerability testing.
• 5+ years of professional experience, with a meaningful portion in software engineering before transitioning into security.
• Proficiency in Rust (preferred) or Go/C++/Python; ability to write code and build tooling.
• Demonstrated experience in product or application security beyond infrastructure or compliance.
• Track record of building security tooling or automation from scratch.
• Experience conducting or leading security reviews on production software systems.
• Strong understanding of identity and access management concepts and tooling.
• Genuine interest in AI security and adversarial testing tooling.
• Interest in software supply chain risk beyond checkbox scanning.
• Strong written communication and ability to work autonomously in a small team.
• Experience in web3, crypto, or DeFi.

Responsibilities

• Identity and access management provisioning, lifecycle operations, and monitoring for critical changes.
• Security reviews across the product portfolio, including threat modeling, code review, fuzzing, and functional testing.
• Day-to-day bug bounty operations: triage, remediation tracking, and escalation of high-severity findings.
• AI security research and tooling: adversarial testing frameworks for agent controls.
• Software supply chain monitoring: detecting malicious packages beyond standard CVE scanning.
• External penetration test coordination: scoping, logistics, and post-engagement remediation tracking.
• Compliance documentation and evidence gathering as requirements emerge.

Skills

Software engineering

Threat modeling

Code review

Vulnerability testing

Security tooling

Rust

Go

Python

IAM concepts

Web3/DeFi

Education

Bachelor's degree in Computer Science, Computer Engineering, or a related technical field

Tools

PAM tooling

IAM systems

Linux

TEEs

Job description

Solana Foundation in the United States seeks a security-focused engineer to own a broad operational and technical scope, reporting to the Head of Security. You will triage access requests, conduct security reviews, and build testing frameworks with a focus on AI security and supply-chain risk.

You will work remotely with a small team, writing security tooling and contributing to production security reviews across the Solana ecosystem.