Senior Security Engineer - Infrastructure
- Own cloud security posture across AWS and GCPs: IAM, network, encryption, logging, and account structure.
- CNAP: prioritize findings against real risk, drive remediation through engineering, and measure progress.
- Design and enforce IaC guardrails: pre-merge policy-as-code, required modules, and CI gates that make the secure path the default.
- Lead identity and access design across cloud, IdP, and developer platforms. Drive least-privilege as a continuously enforced property, not an annual project.
- Own secrets management strategy and migration off of long-lived credentials wherever feasible .
- Run focused offensive testing against our own infrastructure: cloud red-team scenarios, IAM privilege-escalation paths, CI/CD supply-chain attack paths, and lateral-movement chains. Translate findings into durable controls.
- Partner with SecOps on detection coverage for cloud control-plane abuse and with Product Security on the infra side of application threat models.
- Drive third-party and supply-chain risk for infra components: container base images, build pipelines, OSS dependencies in Terraform modules, and IaC providers.
- Lead incident response for infra-rooted incidents alongside the SecOps lead.
- Mentor engineers on threat modeling, secure-by-default infra patterns, and how to reason about blast radius.
- 3-5+ years in security engineering with deep focus on cloud and/or infrastructure.
- Strong IaC skills - you have written, reviewed, and refactored real IaC at scale, and you can explain the failure modes of large IaC codebases.
- Production experience across AWS, GCP, or Azure.
- Hands-on experience with a cloud security platformn
- Strong scripting skills in Python or Go.
- Working knowledge of Kubernetes security (RBAC, admission control, workload identity) if our stack uses it; bonus if you can operate it.
- Comfort owning a domain end-to-end: design, build, operate
- Experience defending crypto, fintech, or other targeted environments.
- Experience with CI/CD security
- Adjacent experience in offensive security, application security, or other engineering disciplines welcome
- Familiarity with how on-chain operations interact with off-chain infrastructure
- Competitive compensation including salary, future token rights, and/or equity (according to your preferences) - we're well-funded and believe that great talent deserves great compensation
- Full benefits (medical, vision, and dental) and flexible vacation policy (PTO)
- Small remote-first team across many countries - you'll be an early team member helping shape our vision, culture, and design practices
- A+ colleagues - our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, Pinterest, McKinsey, Circle, Uniswap, Phantom
- Best-in-class investors - we are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures
About Ondo Finance
Ondo Finance is at the forefront of bridging traditional finance with the innovative world of blockchain. We are a leading Decentralized Autonomous Organization (DAO) and protocol dedicated to bringing real-world assets (RWAs) onto the blockchain, unlocking unprecedented liquidity and accessibility for institutional and individual investors alike. Our mission is to build the foundational infrastructure for a more efficient, transparent, and inclusive financial system, leveraging the power of Web3 technologies to redefine how value is created and exchanged globally. Through our pioneering work with tokenized securities and yield-generating stablecoin solutions, Ondo Finance is setting new industry standards and expanding the horizons of decentralized finance (DeFi). Our culture thrives on intellectual curiosity, relentless innovation, and a collaborative spirit. We empower our team members to tackle complex challenges, push the boundaries of what's possible in crypto, and contribute directly to the evolution of a global financial paradigm. At Ondo Finance, you'll work alongside brilliant minds passionate about blockchain's transformative potential, in an environment that fosters growth, ownership, and a shared commitment to excellence. We believe in open communication, data-driven decisions, and a flat organizational structure that enables every voice to be heard and valued. Join Ondo Finance and be a pivotal part of shaping the future of finance. If you're a talented professional eager to make a tangible impact in the blockchain space, contribute to a product that truly matters, and grow within a fast-paced, dynamic Web3 organization, then your journey starts here. We offer unparalleled opportunities to work on cutting-edge financial instruments, robust decentralized protocols, and contribute to a vision that will democratize access to finance worldwide. Come build with us and leave your mark on the next generation of financial infrastructure.
Ready to Apply?
To submit your application for this position, please visit Ondo Finance's official website and follow their application process.