Engineering Lead – Security

Job not on LinkedIn

🔥 19 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Somnia

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

Somnia is a company that seems to explore the realms of imagination and subconscious experiences, as suggested by its thought-provoking questions about what one sees when they close their eyes. Their focus may be on introspective experiences or technologies related to enhancing or understanding dreams and vision.

📋 Description

• Own security across Somnia—the infrastructure and operations running the L1, the products and services teams ship on top of it, the policies and processes that govern how we work, and the multisig and key management protecting the protocol's most critical assets. • Help set the security strategy and posture and do the work—hardening infrastructure, defining incident response, securing signing and treasury operations, and raising the bar across the team. • Treat security as an enabler of velocity, not a blocker, and use AI as a multiplier. • Define and roll out the policies and standards that govern the organization—access control, secrets management, secure SDLC, change management, compliance-readiness. Practical enough that engineers actually follow them. • Drive application and supply-chain security for what Somnia ships—secure-by-default patterns, dependency and build-pipeline scanning in CI, and security reviews where the stakes are highest. • Design and operate multisig governance, signing ceremonies, and the key lifecycle for treasury, upgrades, and privileged ops. No single points of failure; everything auditable. • Build and lead the security incident-response capability—detection, triage, containment, blameless postmortems—and run tabletops. • Stay hands-on—threat modeling, security reviews, and red-team exercises—and coordinate external audits and bug bounties to raise the bar company-wide.

🎯 Requirements

• Extensive security engineering, with deep infrastructure security and SecOps expertise at scale—and the application-security breadth to raise the bar across product teams. • Hands-on securing and operating production systems—Linux internals, networking, containers/Kubernetes, IaC. • Track record defining and implementing security policies an engineering org actually adopts. • Key management at depth: signing workflows, HSMs, secrets management, key generation/rotation/recovery. • Strong incident response leadership: detection, containment, forensics, postmortems. • Cryptography fundamentals as applied to blockchain and key management. • Senior-level ownership and judgment; clear communication and the ability to influence without authority. • Comfortable in high-stakes environments. These are financial systems with real money on the line—mistakes are expensive and public, and that pressure has to sit fine with you. • Genuine interest in crypto and on-chain systems.

🏖️ Benefits

• Competitive compensation with token incentives