Security Engineer

Security Engineer

Our client is an innovative firm operating at the intersection of institutional finance and emerging blockchain technology. Backed by $40M in funding from premier venture capital firms including Electric Capital and Paradigm, the organization is bridging the gap between decentralized finance and traditional Wall Street by rebuilding financial infrastructure to be faster, safer, and fully on-chain.

In this environment, security is viewed as a primary client-facing differentiator and a core pillar of institutional trust. The security program is integral to client due diligence, auditor engagements, and enterprise contract negotiations. Our client is seeking a Security Engineer to serve as the hands-on execution layer of a security strategy designed by the CISO.

This is a builder role focused on the technical implementation of a modern, cloud-native security stack. The successful candidate will stand up identity enforcement, endpoint protection, cloud posture management, threat detection, and GRC evidence pipelines. This position reports directly to the CISO, offering high technical autonomy and executive visibility within a production-grade environment.

Key Responsibilities:

Security Infrastructure & Implementation

• Design, deploy, and maintain core security controls across identity, endpoint, cloud, and application layers, including SSO/MFA enforcement, MDM, EDR, CSPM, secrets management, and DLP.
• Lead the technical integration of security tooling, ensuring controls are configured to produce auditor-credible evidence.
• Execute the technical security roadmap under the guidance of the CISO, managing parallel workstreams across infrastructure and daily operations.

Monitoring, Detection & Incident Response

• Build and maintain detection coverage across cloud and endpoint systems, validating alert paths through documented test scenarios.
• Monitor security logs for anomalous activity, investigate potential incidents, and provide structured updates to leadership.

Vulnerability & Patch Management

• Manage the vulnerability lifecycle, including scanning, triage, SLA-tracked remediation, and patching verification.
• Maintain a comprehensive inventory of non-human identities, including service accounts and API keys, ensuring proper rotation and expiry tracking.

Automation & Continuous Improvement

• Implement automation across security controls and evidence collection to reduce manual burden and improve scalability.
• Proactively identify security posture gaps and provide recommendations for enhancement to the CISO.

GRC & Operational Support

• Align technical controls with governance requirements and maintain organized artifacts for SOC 2 and other regulatory audits.
• Manage security aspects of the employee lifecycle, including device enrollment, identity provisioning, and access revocation.
• Develop documentation for security configurations and standard operating procedures.