Security Engineer
Allium · Remote
About this role
## Security Engineer ### About Allium Allium is building the **system of record for onchain finance**—a neutral, canonical data layer that institutions can build on with confidence. Blockchains are optimized for **writes**, not reads. Raw event logs are fragmented, hard to interpret, and painful to maintain—so finance teams can’t reliably answer questions like “Who are the largest Ethereum token holders over time?” without heavy infrastructure and complex decoding. Allium **ingests, verifies, and standardizes data across 140+ blockchains and 30+ petabytes of history**, closing gaps in: - **Semantic** translation (events → financial concepts like payments, trades, deposits, staking income) - **Standardization** (thousands of protocols → a single canonical cross-chain schema) - **Infrastructure** (read-optimized, globally distributed data at web scale) - **Accountability** (auditable methodology, SLAs, and SOC 1 & 2 compliance) ### The Role We’re hiring a **Security Engineer** to build and operate the controls that protect **Allium’s infrastructure, applications, employee systems, and use of AI**. You’ll work closely with Engineering and the security program lead to investigate threats, implement practical fixes, and automate security work. As AI agents gain access to code, data, and tools, security must cover both **human and machine activity**—including safeguards against automated attacks, credential theft, and compromised dependencies. This is a **hands-on engineering** role: you’ll write code, test controls, investigate real signals, and drive findings through remediation. ### What You’ll Do - **Secure cloud infrastructure and access** - Implement least privilege, phishing-resistant authentication, short-lived credentials, controlled privileged access - Improve cloud configuration, managed credential storage, and network protections - Strengthen secrets scanning and prevent credentials from entering source control - **Secure AI agents and developer tools** - Implement permissions, execution isolation, network restrictions, and audit trails for coding assistants/agents/tool integrations (including MCP) - Test for prompt injection, tool misuse, and unintended data access from untrusted content - Build safeguards at the point where actions execute - **Build detection and response** - Correlate identity, cloud, workload, and CI/CD telemetry to detect credential theft, unusual access, unauthorized agent actions, suspicious software changes, and data exfiltration - Investigate attacks, reduce alert noise, and test response procedures (e.g., session revocation, exposed-credential rotation, removing unauthorized access) - **Reduce software supply-chain risk** - Assess dependencies, CI/CD workflows, third-party integrations, and developer environments - Partner with engineers to validate findings, protect build/deployment credentials, and remediate vulnerabilities - **Move quickly on relevant threats** - Maintain visibility into internet-facing services (including developer tools and management interfaces) - Evaluate new vulnerabilities and active exploitation against real exposure - Patch, isolate, revoke credentials, or apply compensating controls—then verify effectiveness - **Automate and document** - Use code/APIs for access reviews, configuration checks, evidence collection, and remediation tracking - Use AI thoughtfully for security work (validate outputs and protect sensitive data) - **Support
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.