Senior Security Engineer Security Manager Crypto Web3

Framework Ventures; United States; Remote; USD 100,000 - 150,000; Full time

Job summary

Framework Ventures is seeking a skilled security professional to architect and manage comprehensive security solutions. Key responsibilities include establishing security policies, participating in penetration testing, and monitoring security incidents. Ideal candidates will have strong Information Security skills, experience in public cloud environments, and expertise in infrastructure-as-code tools. A familiarity with blockchain technology is preferred. This role supports remote work.

Qualifications

• Strong InfoSec skills with experience in application security.
• Experience developing within public cloud environments.
• Hands-on engineering with infrastructure-as-code tools like Terraform.

Responsibilities

• Architecting and managing comprehensive security solutions.
• Monitoring and responding to security incidents.
• Participating in penetration testing and purple teaming.

Skills

Information Security (InfoSec)

Application Security

Cloud Engineering

Infrastructure-as-code (Terraform, Ansible)

Threat Modelling

DevSecOps

Blockchain Technology

Job description

Responsibilities

Architecting, implementing, and managing comprehensive security solutions. Establish and enforce security policies, standards, and guidelines that comply with industry regulations and best practices. Participate in penetration testing and purple teaming with ongoing or new projects to ensure their security posture is at a high level. Monitor and respond to security incidents, ensuring quick resolution. Build automation and leverage security frameworks with engineers that are able to improve security and reduce friction. Take part in critical discussion topics, with the ability to challenge decisions and the status quo; we take collaboration and feedback seriously, believing it is one of the foundational principles of a great team.

Qualifications

• Strong Information Security (InfoSec) skills, with proven experience in application security or a relevant field.
• Hands‑on experience of developing, engineering, or architecting within a public cloud environment.
• Experience with engineering, using infrastructure‑as‑code (such as Terraform and Ansible).
• Experience with performing threat modelling exercises or a very good understanding of the methodology and ability to assess a project’s risk.
• Understanding of container and DevSecOps concepts (we use DefectDojo) with CI/CD experience.
• Familiarity with blockchain technology and cryptocurrency trading platforms.

Bonus Points

• Professional certifications such as OSCP, CISSP, CDP & CMTP.
• Experience with IT security frameworks such as SOC 2 and ISO 27001.

LI-REMOTE