Application Security Engineer, Paxos
$169.2-195k
+ Equity
Blockchain infrastructure for financial services
Open for applications
Blockchain infrastructure for financial services
201-500 employees
Open for applications
$169.2-195k
+ Equity
201-500 employees
Company mission
To enable the movement of any asset, at any time, in a trustworthy way.
Role
Who you are
- The Breaker/Builder Hybrid: Proven ability to perform deep-dive manual security testing while also securing production-quality code
- Modern Web2 Stack: Expert-level knowledge of OWASP Top 10, CWE, and API security vulnerabilities (Go, Java, or Ruby preferred)
- Automation First: Experience building and scaling security checks directly into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins)
- Cloud Fundamentals: Working knowledge of AWS/GCP security configurations, particularly IAM, VPCs, and WAF management
What the job involves
- The Security team is a specialized, deeply technical, and vigilant group tasked with protecting our digital assets, customer funds, and sensitive data against a sophisticated threat landscape. The team has many pillars, such as Application and Blockchain Security, Cloud Security, Security Operations, GRC, and IT
- As an Application Security Engineer, you will be a key guardian of our financial and blockchain ecosystem, ensuring that the code we ship and run is secure by design
- You will act as a "Breaker" by identifying complex vulnerabilities and a "Builder" by engineering automated solutions that empower our developers to move fast without compromising security. This role sits at the unique intersection of traditional Fintech and emerging Web3 technologies
- Perform deep-dive security reviews of web applications, APIs, and cloud infrastructure
- Develop security-focused tools and libraries in Go, Java, or Ruby to assist developers in writing secure code
- Support our blockchain initiatives by identifying risks in L1/L2 integrations and smart contract interactions
- Manage and tune Web Application Firewalls (WAF) and cloud-native security controls
- Contribute to the security culture through developer training and participating in incident response when necessary
- Build and maintain the tooling that integrates security into our development lifecycle, moving from manual reviews to automated, scalable guardrails
- Partner with engineering teams during the design phase of new features (Threat Modeling) to identify risks before a single line of code is written
- Manage the end-to-end lifecycle of vulnerabilities, from discovery via internal audits or Bug Bounties to collaborating with engineers on "gold-standard" remediations
Our take
Paxos develops regulation-compliant infrastructure services for companies looking to add features like crypto brokerages or branded stablecoins to their customer offerings. Its focus on regulatory compliance, and its status as one of only three national trusts born in the crypto ecosystem, gives it an edge in building a unique and global network of enterprise customers.
Cryptocurrency remains a risky sector, so a company at the forefront of crypto regulation is proving highly attractive to a growing sector of enterprises tentatively dipping their toes in. It is pushing ahead of competitors as one of the largest crypto/blockchain startups with substantial funding and an impressive valuation.
Its growth has been backed up by material results, too. It has established relationships with firms like Bank of America, Credit Suisse and Mastercard. PayPal also leverages Paxos on its backend to enable its users to buy, sell and hold crypto. This proven success with an expanding roster of big-name clients is very impressive, as is the company's success in receiving approval to convert to an OCC National Trust Bank.
Steph
Company Specialist at Welcome to the Jungle
Insights
10% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Apr 2021
$300m
SERIES D
Dec 2020
$142m
SERIES C
Total funding: $535.3m
Company HQ
Midtown East, New York, NY
Leadership
Charles Cascarilla
(CEO & Co-founder)Previous Co-founder and Partner at Cedar Hill Capital Partners for 10 years. Current Partner at Liberty City Ventures and Founding Board Member of the Association for Digital Asset Markets, alongside working at Paxos.
Rich Teo
(CEO Asia & Co-founder)Previous Financial Analyst at Citi for 2 years before becoming a Principal / Senior Analyst at Cedar Hill Capital Partners. Has served as CEO of Asia at Paxos for 7 years.
Share this job
View 32 more jobs at Paxos