Staff Security Engineer: Build Blockchain Security (Remote)

Cari; Oregon; Hybride; USD 180 000 - 260 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Medical benefits

401(k)

Résumé du poste

Cari is building a blockchain-based payments platform and seeks a foundational security lead reporting to the CISO. You will own identity, cloud security, and detection across on-chain and off-chain components, guiding a small team to design and implement secure, scalable controls from day one.

You will shape the security program for a real-time, private ZKsync-based L2, drive compliance with SOC 2 Type II, and partner with engineering to bake security into CI/CD, IAM, and incident response.

Qualifications

• 8+ years in information security, DevSecOps, or infrastructure security.
• Deep ownership of at least two areas, with hands-on experience in the third: IAM, SIEM/detection, AWS security.
• Experience securing EVM-compatible blockchain or Web3 infrastructure.
• Experience securing CD pipelines (GitHub Actions or equivalent) and containerized workloads.
• Incident response leadership and high autonomy in a security-build-from-scratch environment.

Responsabilités

• Own identity end to end. Roll out SSO and automated joiner-mover-leaver lifecycle management across corporate and production systems.
• Secure blockchain and signing infrastructure. Harden Solidity contracts, private ZKsync L2 nodes, and custody integrations.
• Build detection from the ground up. Deploy and own SIEM, log onboarding, and detection authoring.
• Lead incident response. Write containment runbooks and drive postmortems.
• Harden AWS. Enforce least-privilege IAM, network segmentation, and secrets management.
• Make security part of shipping. Build automated security gates into CD pipelines and dev workflows.
• Drive compliance readiness. Implement controls for SOC 2 Type II and audits.

Connaissances

Enterprise IAM

SIEM & detection

AWS security

Outils

GitHub Actions

Terraform

ECS/EKS

Secrets Manager

Description du poste

Cari is building a blockchain-based payments platform and seeks a foundational security lead reporting to the CISO. You will own identity, cloud security, and detection across on-chain and off-chain components, guiding a small team to design and implement secure, scalable controls from day one.

You will shape the security program for a real-time, private ZKsync-based L2, drive compliance with SOC 2 Type II, and partner with engineering to bake security into CI/CD, IAM, and incident response.