Lead Client Security Engineer

Groom Lake is seeking a Lead Client Security Engineer to lead security initiatives across client environments in the crypto and traditional financial services sectors. The role advises clients, designs practical security roadmaps, and drives hands-on implementation across technical and operational teams.

Responsibilities:

• Act as the primary security advisor for assigned clients
• Build credibility with technical, operational, and executive stakeholders
• Assess client environments and identify risks, gaps, and priorities without waiting for a narrowly defined scope
• Translate findings into clear, practical guidance tailored to the client’s business model, threat profile, and operating reality
• Design security roadmaps and phased implementation plans for client environments
• Prioritize work across identity, access, cloud security, logging and monitoring, SaaS hardening, application security, incident readiness, vendor risk, and operational controls
• Help clients mature from informal or reactive security practices into structured and sustainable programs
• Distinguish between urgent issues, foundational improvements, and lower-value noise
• Drive execution across internal teams, client engineering teams, vendors, and external specialists
• Define ownership, sequencing, and success criteria for security initiatives
• Ensure implementation work is grounded in real risks and tailored to each client's environment rather than relying solely on generic best practices
• Personally validate key controls and provide hands-on support where needed to move work forward
• Advise clients on security architecture and control design across cloud, identity, endpoint, SaaS, authentication, and operational workflows
• Review and improve access models, privileged access, SSO and MFA posture, logging and alerting, secrets handling, change management, and incident readiness
• Support investigations and incident response when required, but as part of a broader advisory and program leadership function rather than as the sole focus of the role
• Produce executive-ready recommendations, roadmaps, and status updates
• Communicate clearly during both proactive planning and high-pressure situations
• Translate technical findings into clear, actionable client facing reports that help non technical stakeholders understand security risks, business impact, and recommended remediation steps

Requirements:

• 5+ years in cybersecurity, with meaningful experience in security engineering, security architecture, security consulting, security program design, or client-facing advisory work
• Strong understanding of cloud, identity and access management, SaaS security, and practical security controls for modern internet-facing organizations
• Experience assessing environments, identifying security gaps, and translating them into actionable remediation plans
• Demonstrated hands-on experience implementing, configuring, and validating security controls across cloud, identity, SaaS, or similar environments
• Experience working directly with clients or business stakeholders, not just internal technical teams
• Ability to operate independently, make sound decisions, and manage ambiguity without constant escalation
• Strong written and verbal communication skills
• This role does not require deep smart contract auditing, protocol security, formal verification, or on-chain exploit research experience
• strong Web2 security engineering, architecture, and advisory capabilities
• Experience supporting fintech, payments, crypto-adjacent, SaaS, or other high-risk internet-native organizations
• Familiarity with security issues common to crypto companies, including treasury workflows, founder/admin targeting, contractor-heavy environments, and high social engineering risk
• Experience coordinating implementation across multiple workstreams and stakeholders
• Exposure to incident response, investigations, and security events in cloud and SaaS environments
• Experience with AWS, Google Workspace, GitHub, Cloudflare, Okta or similar core platforms
• Consulting, advisory, vCISO, or security architecture background preferred