Staff Security Engineer

Job not on LinkedIn

🔥 13 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 17%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Cari Network

WebsiteLinkedInAll Job Openings

2 - 10 employees

₿ Crypto

💳 Fintech

🏦 Banking

🔥 Funding within the last year

💰 $32.5M Debt Financing on 2026-09

Crypto • Fintech • Banking

Cari Network is a permissioned, blockchain-based payments and settlement platform that issues tokenized deposits called "Cari"—digital tokens representing U. S. dollar customer deposits held at chartered banks. The network is built to enable always-on, programmable, on-chain money movement that integrates with bank systems, preserves regulatory protections of underlying deposits (including FDIC insurance eligibility within limits), and connects traditional banking infrastructure with decentralized finance participants.

📋 Description

• Report directly to the CISO as a foundational security hire • Build Cari's security program from the ground up with high autonomy on a small team • Roll out SSO and automated joiner-mover-leaver lifecycle management across corporate and production systems • Design role and entitlement models, run periodic access reviews, and make least privilege the default • Threat-model and harden Solidity smart contracts, private ZKsync L2 nodes, and custody platform integrations • Define upgrade governance for on-chain systems • Deploy and own the SIEM, onboarding and normalizing logs across cloud, identity, endpoint, and application layers • Build high-signal detections for authentication abuse, control plane activity, privilege escalation, data movement, and anomalous transactions • Own alert quality • Serve as technical lead for alerting, vulnerability management, and threat response • Write containment runbooks, drive investigations through postmortem, and feed lessons back into detection • Enforce least-privilege IAM, network segmentation, and secrets management across ECS/EKS, MSK, and RDS • Build automated security gates into CD pipelines and developer workflows • Implement and document controls for bank-level governance, third-party risk, and audits such as SOC 2 Type II • Comply with Cari information security policies and complete required security awareness training • Protect the confidentiality, integrity, and availability of Cari systems and data

🎯 Requirements

• 8+ years in information security, DevSecOps, or infrastructure security • Deep ownership of at least two of the following areas, with hands-on experience in the third: Enterprise IAM; SIEM and detection; AWS security • Enterprise IAM experience including SSO, federation, automated provisioning and deprovisioning, role and entitlement design, and access reviews • SIEM and detection experience including deployment, tuning, log onboarding, and detection authoring • AWS security experience with ECS or EKS, MSK, RDS, IAM, VPC, and Secrets Manager • Experience securing EVM-compatible blockchain or Web3 infrastructure • Experience securing CD pipelines such as GitHub Actions or equivalent and containerized workloads • Incident response leadership • Comfort working with high autonomy on a small team building a security program from scratch • Solidity smart contract reviews, including upgradeable proxies such as UUPS and role governance • Defensive knowledge of L2s, cross-chain bridges, ZK rollups, and EVM transaction mechanics • Key management, custody APIs, MPC signing, or real-time Web3 threat detection and transaction circuit breakers • Detection-as-code • Terraform, including auditing environments and codifying secure baselines • U.S. banking regulation (FFIEC), SOC 2 Type II, or ISO 27001 audits • Must be based in the United States • Must be legally authorized to work in the United States • Must answer whether future work-authorization sponsorship is required

🏖️ Benefits

• Competitive base salary, bonus, and equity • Full medical, vision, dental benefits • 401(k) with company matching • Flexible PTO in a remote-first environment • Opportunity to shape a market-defining protocol with an experienced founding team

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume