Senior Security Engineer

Lightspark is building the open payment protocol for the Internet, and they are seeking an experienced Senior Security Engineer to help secure their platform and systems. The role involves building secure frameworks, performing security reviews and audits, and proactively preventing security vulnerabilities while collaborating with cross-functional teams.

Responsibilities:

• Build tools and systems to improve the security of our products and infrastructure by default
• Evaluate and analyze the security posture of engineering processes, products, and infrastructure, with a specific focus on code auditing and review, identifying potential vulnerabilities, and recommending appropriate mitigations
• Conduct security risk assessments and audits, ensuring compliance with industry standards and regulatory requirements, with a focus on code security
• Collaborate with cross-functional teams to design, develop, and implement secure engineering practices and solutions
• Provide technical guidance and expertise to engineering teams on secure development practices and techniques, with a focus on blockchain/crypto security and code auditing and review
• Partner with Security Engineering leaders in development and delivery of security training and awareness programs for engineering staff, with a focus on secure coding practices and blockchain/crypto security
• Monitor and investigate security incidents, performing root cause analysis and developing remediation plans, with a focus on code vulnerabilities
• Stay current with emerging security threats, technologies, and best practices, making recommendations for continuous improvement of the company's security posture, especially in the blockchain and cryptocurrency space

Requirements:

• Minimum of 5 years of experience in engineering security, including experience with secure software development, infrastructure security, and risk management, with a strong focus on code auditing and review
• Strong understanding of security concepts, principles, and best practices, including secure coding, encryption, authentication, and access control, with a focus on blockchain/crypto security
• Proficient in at least one programming or scripting language (e.g., Python, Java, C/C++, or similar)
• Knowledge of common security vulnerabilities, attack vectors, and mitigation strategies, preferably with a focus on code vulnerabilities in the blockchain and cryptocurrency space
• Strong understanding of at least two of cloud/infrastructure security, application security, Mac/Linux security, and Cloud SaaS security
• Familiarity with industry standards and frameworks, such as ISO 27001, NIST, or OWASP, with a focus on their application in the blockchain and cryptocurrency space
• Excellent problem-solving, analytical, and communication skills, with the ability to work effectively in a collaborative team environment
• A CS degree or equivalent is ideal but not required. We appreciate and acknowledge that some of the best talent comes from non-traditional backgrounds, especially in the security, blockchain, and cryptocurrency space