security engineer in onchain finance

Allium ingests, verifies, and standardizes data across more than 140 blockchains and 30 petabytes of history. It provides a canonical data layer for onchain finance, serving financial, engineering, product, strategy, research, and executive teams, as well as AI agents.

• Secure cloud infrastructure and access by implementing least privilege, phishing-resistant authentication, short-lived credentials, controlled privileged access, and reliable provisioning and deprovisioning
• Improve cloud configuration, managed credential storage, network protections, and secrets scanning, and prevent credentials from entering source control
• Secure AI agents and developer tools by implementing permissions, execution isolation, network restrictions, and audit trails, including for MCP integrations
• Test how untrusted content could trigger prompt injection, tool misuse, or unintended data access, and build safeguards where actions execute
• Build detection and response by correlating identity, cloud, workload, and CI/CD telemetry to detect credential theft, unusual access, unauthorized agent actions, suspicious software changes, and data exfiltration
• Investigate attacks across systems, reduce alert noise, and test response procedures with system owners, including session revocation, exposed-credential rotation, and removal of unauthorized access
• Reduce software supply-chain risk by assessing dependencies, CI/CD workflows, third-party integrations, and developer environments
• Partner with engineers to validate findings, protect build and deployment credentials, and remediate vulnerabilities
• Monitor internet-facing services, including developer tools and management interfaces, and evaluate new vulnerabilities and active exploitation against actual exposure
• Help service owners patch, isolate, revoke credentials, or apply compensating controls, then verify that the response worked
• Automate and document access reviews, configuration checks, evidence collection, and remediation tracking using code and APIs
• Use AI thoughtfully for security work, validate its output, and protect sensitive data
• Deploy, validate, and maintain endpoint protections and device security baselines, including prevention settings, tamper protection, encryption, and timely updates
• Work with the employee IT owner on identity and SaaS controls
• Provide technical evidence for audits and customer reviews, and maintain useful runbooks

• Typically 4+ years of relevant security, infrastructure, or software engineering experience, with direct responsibility for implementing security controls
• Hands-on experience with a major cloud platform and a strong foundation in identity, networking, operating systems, and access control
• Depth in at least two relevant areas, such as cloud security, detection and response, application security, vulnerability management, or corporate security
• Experience investigating technical problems using logs and system behavior, testing hypotheses, and following issues through to resolution
• Clear communication, practical judgment, and constructive working relationships with engineers and business teams

• Medical, dental, vision, life, and AD&D insurance; US employees receive 100% coverage for Gold plans and 80% for dependents
• Meaningful early-stage equity; every full-time employee receives a stock option grant
• Flexible, trust-based paid time off; policies in every hiring country meet or exceed local statutory vacation requirements
• Company-sponsored 401(k) plan in the US