Engineering Lead – Security

Emploi pas sur LinkedIn

🕒 il y a 9 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Somnia

Site WebLinkedInTous les Emplois

11 - 50 employés

💼 Conseil

📣 Marketing

📦 Logistique

Consulting • Marketing • Logistics

Somnia est une entreprise qui semble explorer les domaines de l'imagination et des expériences subconscientes, comme le suggèrent ses questions stimulantes sur ce que l'on voit lorsqu'on ferme les yeux. Leur focus pourrait être sur des expériences introspectives ou des technologies liées à l'amélioration ou à la compréhension des rêves et de la vision.

Description

• Own security across Somnia—the infrastructure and operations running the L1, the products and services teams ship on top of it, the policies and processes that govern how we work, and the multisig and key management protecting the protocol's most critical assets. • Help set the security strategy and posture and do the work—hardening infrastructure, defining incident response, securing signing and treasury operations, and raising the bar across the team. • Treat security as an enabler of velocity, not a blocker, and use AI as a multiplier. • Define and roll out the policies and standards that govern the organization—access control, secrets management, secure SDLC, change management, compliance-readiness. Practical enough that engineers actually follow them. • Drive application and supply-chain security for what Somnia ships—secure-by-default patterns, dependency and build-pipeline scanning in CI, and security reviews where the stakes are highest. • Design and operate multisig governance, signing ceremonies, and the key lifecycle for treasury, upgrades, and privileged ops. No single points of failure; everything auditable. • Build and lead the security incident-response capability—detection, triage, containment, blameless postmortems—and run tabletops. • Stay hands-on—threat modeling, security reviews, and red-team exercises—and coordinate external audits and bug bounties to raise the bar company-wide.

🎯 Exigences

• Extensive security engineering, with deep infrastructure security and SecOps expertise at scale—and the application-security breadth to raise the bar across product teams. • Hands-on securing and operating production systems—Linux internals, networking, containers/Kubernetes, IaC. • Track record defining and implementing security policies an engineering org actually adopts. • Key management at depth: signing workflows, HSMs, secrets management, key generation/rotation/recovery. • Strong incident response leadership: detection, containment, forensics, postmortems. • Cryptography fundamentals as applied to blockchain and key management. • Senior-level ownership and judgment; clear communication and the ability to influence without authority. • Comfortable in high-stakes environments. These are financial systems with real money on the line—mistakes are expensive and public, and that pressure has to sit fine with you. • Genuine interest in crypto and on-chain systems.

🏖️ Avantages

• Competitive compensation with token incentives