Security Engineer
Posted 4hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Responsibilities:
- Build and operate controls protecting Allium’s infrastructure, applications, employee systems, and AI use
- Work with Engineering and the security-program lead to investigate threats, implement practical fixes, and automate security work
- Implement least privilege, phishing-resistant authentication, short-lived credentials, privileged-access controls, provisioning and deprovisioning
- Improve cloud configuration, credential storage, network protections, and secrets scanning
- Secure AI agents and developer tools through permissions, execution isolation, network restrictions, audit trails, and safeguards against prompt injection and tool misuse
- Correlate identity, cloud, workload, and CI/CD telemetry to detect threats and investigate attacks
- Reduce alert noise, test response procedures, revoke sessions, rotate exposed credentials, and remove unauthorized access
- Assess software dependencies, CI/CD workflows, third-party integrations, and developer environments to reduce supply-chain risk
- Monitor internet-facing services, evaluate vulnerabilities and active exploitation, and coordinate remediation
- Automate access reviews, configuration checks, evidence collection, and remediation tracking using code and APIs
- Deploy and maintain endpoint protections and device security baselines
- Support identity and SaaS controls, audits, customer reviews, and security runbooks
Requirements:
- Typically 4+ years of relevant security, infrastructure, or software engineering experience, with direct responsibility for implementing security controls
- Hands-on experience with a major cloud platform
- Strong foundation in identity, networking, operating systems, and access control
- Depth in at least two areas such as cloud security, detection and response, application security, vulnerability management, or corporate security
- Experience investigating technical problems from logs and system behavior, testing hypotheses, and following issues through resolution
- Clear communication, practical judgment, and constructive working relationships with engineers and business teams
- Must answer the application question: “What is an Allium? What is your favorite Allium?”
- U.S. work eligibility and visa sponsorship status are requested in the application form
Benefits:
- Medical, Dental, Vision, Life and AD&D insurance; US folks get 100% coverage for Gold plans and 80% for dependents
- Meaningful early-stage equity; every full-time employee receives a stock option grant
- Flexible, trust-based paid time off
- Vacation policies meeting or exceeding local statutory requirements in every country hired
- Company-sponsored 401(k) plan in the US
- Remote work arrangement


















