Associate Blockchain Security Engineer, Galaxy

• We are open to candidates having limited exposure on blockchain technologies who would show a strong interest in learning
• It is key that the candidate has programming experience in an enterprise setting in order to review complex code artifacts and implement some of the required security controls
• Bachelor’s degree in Engineering, Computer Science, or a related field
• A minimum of 4 years of experience in technology or IT/security department
• At least 3 years of hands-on programming experience in languages such as Python, Rust, C++ or similar
• Strong knowledge of secure software development lifecycle (SDLC) practices
• Demonstrated experience in building software running in the cloud architecture, as containers and/or within Kubernetes
• Knowledge of blockchain technology
• In depth understanding of at least a few of the following topics: authentication and authorization technology, TLS and PKI, network security, cloud security, system security
• Security or cloud certifications
• Excellent problem-solving skills and attention to detail
• Strong communication
• Ability to work collaboratively in a fast-paced, dynamic environment

Desirable

• Working in tight collaboration with the on-chain business teams, the blockchain security engineer will assess the security of the various architectures involved in on-chain transactions and require appropriate controls to reach an acceptable level of risk
• The assessment will consists of activities such as: threat modeling, code review, security testing, cloud/server posture assessment
• As a member of the product security team, the engineer will be able to collaborate with team members to improve the existing blockchain assessment model
• Perform security activities for new projects and updates to existing projects of the on-chain business team
• Enhance the existing blockchain assessment model, with guidance form the existing product security engineers
• Research key aspects of the various blockchains used by the on-chain business team
• Security-oriented code review, enhanced with automated security scanning tools (SAST)
• E.g. review Rust server, Solana smart contract, Solidity smart contract
• Implement some of the security controls required by the assessment, when such control can be reused across architectures