Job Description: Security Engineer - Blockchain & Cloud Security

Essential Skills: Security Engineering, Vulnerability Remediation, Security Controls, Blockchain Fundamentals, API Security

Job Summary

We are seeking a skilled and motivated Security Engineer to identify and remediate security vulnerabilities, strengthen security controls, and support secure solution architecture across enterprise applications, infrastructure, and cloud environments. The candidate will collaborate with engineering, operations, and risk and control teams to embed security best practices throughout the software development lifecycle.

The role also involves supporting blockchain solution architecture and secure integration with existing enterprise systems and APIs. The ideal candidate will have a strong foundation in security engineering, vulnerability management, cloud security, and blockchain concepts.

Key Responsibilities

1. Security Assessment and Remediation

• Identify, investigate, and assess security gaps across systems, applications, networks, and cloud environments.

• Drive end-to-end vulnerability remediation, including tracking, prioritization, mitigation, and closure.

• Conduct security reviews, threat modeling, and penetration testing to identify potential vulnerabilities.

• Recommend and implement security solutions to address identified risks and control gaps.

2. Blockchain Security and Integration

• Assist in designing and documenting secure blockchain solution architectures.

• Apply security best practices to blockchain components, smart contracts, tokens, and cryptographic mechanisms.

• Support secure integration of blockchain platforms with enterprise applications, RESTful APIs, and existing systems.

• Help ensure blockchain implementations align with enterprise security standards and architectural requirements.

3. Cloud and Infrastructure Security

• Design, implement, and maintain security controls across cloud and on-premises environments.

• Support security configurations and risk mitigation across AWS, Microsoft Azure, or Google Cloud Platform.

• Strengthen identity and access management, secrets management, encryption, and access control mechanisms.

• Evaluate security tools and technologies to improve the organization's overall security posture.

4. DevSecOps and Application Security

• Collaborate with development teams to integrate security practices into CI/CD pipelines.

• Support secure software development practices, code reviews, and vulnerability scanning.

• Identify application and API security risks and recommend appropriate remediation.

• Promote security automation and continuous security validation throughout the software development lifecycle.

5. Security Monitoring and Incident Response

• Monitor security events, investigate suspicious activities, and support incident response.

• Analyze security alerts, logs, and vulnerabilities to determine potential risks.

• Coordinate with engineering and operations teams to contain, investigate, and resolve security incidents.

• Document findings, root causes, remediation actions, and preventive measures.

6. Governance, Risk, and Compliance

• Develop, maintain, and enforce security policies, standards, and procedures.

• Support compliance assessments and audits aligned with SOC 2, ISO 27001, NIST, and PCI-DSS, as applicable.

• Work with risk and control partners to assess security risks and validate remediation activities.

• Maintain security documentation and provide guidance to internal teams on security best practices.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field, or equivalent practical experience.

• Foundational knowledge of cybersecurity principles, security controls, vulnerability management, and risk remediation.

• Understanding of blockchain fundamentals, including consensus mechanisms, smart contracts, tokens, and cryptography.

• Familiarity with at least one blockchain platform, such as Ethereum, Hyperledger, Solana, or Polygon.

• Understanding of RESTful APIs, application integration, and secure communication protocols.

• Strong analytical, problem-solving, documentation, and communication skills.

• Ability to collaborate effectively with engineering, operations, and risk management teams.

Preferred Qualifications

• Exposure to cloud platforms such as AWS, Azure, or Google Cloud Platform.

• Familiarity with DevOps practices, CI/CD pipelines, Git, and security automation.

• Programming experience in Python, JavaScript, or Solidity.

• Knowledge of IAM, encryption, secrets management, and application security.

• Participation in blockchain hackathons, open-source projects, or relevant technical coursework.

• Relevant certifications such as CISSP, CISM, or CRISC.