Staff Security Engineer, Blockchain & Cloud Security

Cari; United States; Remoto; USD 200.000 - 280.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive salary

Full medical benefits

401(k) matching

Flexible PTO

Founding team impact

Descrizione del lavoro

Cari is building a security program from the ground up. You will own identity, blockchain security, detections, and incident response on a small autonomous team reporting to the CISO. You’ll harden AWS, automate security gates in CI/CD, and drive SOC 2 Type II readiness.

The role focuses on securing a tokenized, on-chain workflow across cloud and on-chain components, with a strong emphasis on least-privilege, threat modeling, and fast, safe delivery.

Competenze

• 8+ years in information security, DevSecOps, or infrastructure security.
• Deep ownership of at least two areas, with hands‑on experience in the third.
• Experience securing EVM-compatible blockchain or Web3 infrastructure.
• Experience securing CD pipelines (GitHub Actions or equivalent) and containerized workloads.
• Incident response leadership.
• Comfort working with high autonomy on a small team building a security program from scratch.

Mansioni

• Own identity end to end: roll out SSO and lifecycle management across corporate and production systems.
• Secure blockchain and signing infrastructure: threat-model and harden Solidity smart contracts, private ZKsync L2 nodes, and custody platform integrations.
• Build detection from the ground up: deploy SIEM, aggregate logs, and create high-signal detections for auth abuse and privilege escalation.
• Lead incident response: coordinate alerting, vulnerability management, and postmortems with lessons learned.
• Harden AWS: enforce least-privilege IAM, network segmentation, and secrets management.
• Make security part of shipping: automate security gates in CD pipelines and developer workflows.
• Drive compliance readiness: implement controls for SOC 2 Type II and audits.

Conoscenze

Information security

DevSecOps

Infrastructure security

Incident response

Blockchain security

Strumenti

GitHub Actions

Containerized workloads

Descrizione del lavoro

Cari is building a security program from the ground up. You will own identity, blockchain security, detections, and incident response on a small autonomous team reporting to the CISO. You’ll harden AWS, automate security gates in CI/CD, and drive SOC 2 Type II readiness.

The role focuses on securing a tokenized, on-chain workflow across cloud and on-chain components, with a strong emphasis on least-privilege, threat modeling, and fast, safe delivery.