Engineering Lead – Security

Stelle nicht auf LinkedIn

🕒 vor 4 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Somnia

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

💼 Beratung

📣 Marketing

📦 Logistik

Consulting • Marketing • Logistics

Somnia ist ein Unternehmen, das – wie seine zum Nachdenken anregenden Fragen dazu, was man sieht, wenn man die Augen schließt, nahelegen – die Sphären der Vorstellungskraft und des Unterbewusstseins erkundet. Der Fokus könnte auf introspektiven Erfahrungen oder auf Technologien liegen, die Träume und visuelle Wahrnehmung verbessern oder besser verständlich machen.

Beschreibung

• Own security across Somnia—the infrastructure and operations running the L1, the products and services teams ship on top of it, the policies and processes that govern how we work, and the multisig and key management protecting the protocol's most critical assets. • Help set the security strategy and posture and do the work—hardening infrastructure, defining incident response, securing signing and treasury operations, and raising the bar across the team. • Treat security as an enabler of velocity, not a blocker, and use AI as a multiplier. • Define and roll out the policies and standards that govern the organization—access control, secrets management, secure SDLC, change management, compliance-readiness. Practical enough that engineers actually follow them. • Drive application and supply-chain security for what Somnia ships—secure-by-default patterns, dependency and build-pipeline scanning in CI, and security reviews where the stakes are highest. • Design and operate multisig governance, signing ceremonies, and the key lifecycle for treasury, upgrades, and privileged ops. No single points of failure; everything auditable. • Build and lead the security incident-response capability—detection, triage, containment, blameless postmortems—and run tabletops. • Stay hands-on—threat modeling, security reviews, and red-team exercises—and coordinate external audits and bug bounties to raise the bar company-wide.

🎯 Anforderungen

• Extensive security engineering, with deep infrastructure security and SecOps expertise at scale—and the application-security breadth to raise the bar across product teams. • Hands-on securing and operating production systems—Linux internals, networking, containers/Kubernetes, IaC. • Track record defining and implementing security policies an engineering org actually adopts. • Key management at depth: signing workflows, HSMs, secrets management, key generation/rotation/recovery. • Strong incident response leadership: detection, containment, forensics, postmortems. • Cryptography fundamentals as applied to blockchain and key management. • Senior-level ownership and judgment; clear communication and the ability to influence without authority. • Comfortable in high-stakes environments. These are financial systems with real money on the line—mistakes are expensive and public, and that pressure has to sit fine with you. • Genuine interest in crypto and on-chain systems.

🏖️ Vorteile

• Competitive compensation with token incentives