Senior Security Engineer - FinTech & Blockchain

Agora; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

Agora is seeking a Senior Security Engineer to secure our products and services. You will partner with Engineering and Product from design to production, reviewing architectures, APIs, and deployments, and guiding pragmatic remediation.

You will lead our security monitoring program, define detections, calibrate alert rules, and work with our SOC in incident response. The role spans threat modeling, vulnerability management, and secure software development.

Qualifications

• 5+ years in product/security/cloud security or related security engineering role.
• Strong fundamentals in reviewing code; experience with JS/TS is relevant.
• Experience securing AWS, containers, Kubernetes, IaC, and CI/CD.
• Familiar with security tooling like SAST/DAST/SCA/CSPM and cloud-native detection.
• Excellent written and verbal communication; autonomous, collaborative.
• Able to translate risk into actionable controls and remediation.

Responsibilities

• Partner with Engineering/Product across design through production.
• Review designs, APIs, infrastructure as code, and deployments for security.
• Identify vulnerabilities and guide pragmatic remediation with engineers.
• Lead or contribute to incident response and post-incident reviews.
• Own vulnerability management: intake, prioritization, tracking, verification.

Skills

Security engineering

TS/Node.js

Cloud security

Threat modeling

Incident response

Security tooling

Vulnerability management

Communication

Tools

SAST

DAST

SCA

CSPM

Container scanning

IaC scanning

SIEM

Job description

Agora is seeking a Senior Security Engineer to secure our products and services. You will partner with Engineering and Product from design to production, reviewing architectures, APIs, and deployments, and guiding pragmatic remediation.

You will lead our security monitoring program, define detections, calibrate alert rules, and work with our SOC in incident response. The role spans threat modeling, vulnerability management, and secure software development.