Senior Security Engineer

Job not on LinkedIn

🕒 3 days ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Agora Finance

WebsiteLinkedInAll Job Openings

1 - 1 employees

₿ Crypto

💳 Fintech

🔌 API

Crypto • Fintech • API

Agora Finance is a fintech and crypto company that issues AUSD, an institutional-grade, fully reserved digital dollar stablecoin, and provides developer-facing APIs to mint, redeem, transfer, and earn on AUSD. The stablecoin is presented as 1:1 backed with USD and short-term U. S. Treasuries/overnight repo/cash and liquid assets, with monthly reserve attestations. Agora emphasizes instant settlement, zero mint/redeem fees, an open reward model that shares yield with partners, and enterprise-focused infrastructure. Company metrics shown in its materials include $84B total transfer volume, 36M lifetime transfers, 38,000 unique addresses, and regulatory milestones such as preliminary conditional approval from the OCC; AUSD is issued by Agora Bermuda Limited under a Bermuda Monetary Authority Class F license.

📋 Description

• Partner with Engineering and Product throughout the development lifecycle, from early design and threat modeling through launch and ongoing operation • Perform security reviews of system designs, application code, APIs, infrastructure as code, cloud environments, Kubernetes workloads, deployment pipelines, and production configurations • Identify vulnerabilities and design weaknesses, communicate impact, and work with engineers on remediation • Serve as a security subject-matter expert for application security, cloud and container security, IAM, secrets management, API security, data protection, and secure software development • Develop reusable security guidance, secure patterns, review checklists, and engineering standards • Administer and improve security tooling, including AI-assisted tools, SAST, DAST, SCA, container and IaC scanning, CSPM, and security monitoring • Integrate security controls into developer workflows and CI/CD pipelines; tune rules, reduce noise, improve coverage, and ensure findings lead to action • Translate threat models and attack paths into logging, monitoring, and detection requirements • Identify telemetry gaps across application, cloud, identity, infrastructure, and blockchain-related security, and work with engineering teams to address them • Design, implement, test, document, and tune security alert rules and detection logic • Triage and investigate security detections, correlate activity across data sources, and determine scope, impact, severity, and response • Work with the SOC to improve alert quality, escalation criteria, investigation procedures, and response runbooks • Participate in incident response, including investigation, containment, eradication, recovery, coordination, and evidence preservation • Lead or contribute to post-incident reviews and implement durable improvements • Own day-to-day vulnerability management, including intake, validation, prioritization, assignment, remediation tracking, exceptions, verification, and reporting • Support third-party penetration tests, code reviews, architecture assessments, and independent security engagements • Assess security implications of new vendors, technologies, integrations, and architectural changes • Build automation and metrics to improve security visibility and shorten investigation and remediation time • Contribute to product security, platform security, detection engineering, vulnerability management, and incident-readiness roadmaps

🎯 Requirements

• 5+ years of hands-on experience in product security, application security, cloud security or a closely related security engineering role • Strong software engineering fundamentals and ability to review application code; experience with TypeScript, Node.js, JavaScript, or another modern language especially relevant • Experience reviewing web applications, backend services, REST APIs, authentication and authorization systems, and relational database designs • Practical knowledge of common application and API vulnerabilities, threat-modeling techniques, secure design principles, and modern identity patterns • Experience securing AWS environments, containerized workloads, Kubernetes, infrastructure as code, and CI/CD or GitOps workflows • Hands-on experience implementing or administering SAST, DAST, SCA, CSPM, container scanning, secrets detection, infrastructure-as-code scanning, SIEM, or cloud-native detection platforms • Experience developing or tuning security detections using application, cloud, identity, network, and infrastructure telemetry • Strong investigation skills, including analyzing logs and system activity, developing and testing hypotheses, establishing timelines, and determining scope and impact • Experience working with SOC, including alert escalation, investigation handoffs, runbook development, and detection-quality improvement • Experience participating in security incident response and coordinating with engineering and operational teams under time pressure • Experience operating a vulnerability management process and driving remediation across multiple engineering teams • Ability to evaluate findings and detections based on exploitability, confidence, and business impact • Experience working with external penetration testers, auditors, or specialist security reviewers • Strong written and verbal communication skills • High autonomy and sound judgment • Collaborative, low-ego approach to security • Preferred: experience securing fintech, payments, digital-assets, or high-assurance financial platforms • Preferred: familiarity with blockchain systems, smart-contract integrations, transaction flows, custody models, signing infrastructure, or cryptographic key management • Preferred: experience with TypeScript, Pulumi, AWS, Argo CD, Cloudflare, PostgreSQL, Prometheus, or Grafana • Preferred: experience with incident-response tooling, security data pipelines, log normalization, detection-as-code, or automated enrichment and response • Preferred: experience defining operational security metrics • Preferred: experience designing security controls for distributed, event-driven, multi-tenant, or high-availability systems • Preferred: ability to create security automation, internal tools, or CI/CD integrations using code • Preferred: experience applying AI-assisted tools to security investigations, detection engineering, or secure development • Preferred: relevant offensive-security, incident-response, and cloud-security experience or certifications

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume