Senior Security Engineer – Product & Infrastructure

• Own product and infrastructure security across Squads
• Serve as security reviewer in product and engineering calls
• Lead threat modeling and security design reviews for products, features, and infrastructure changes
• Perform secure code reviews across backend services, APIs, frontends, and Solana programs
• Focus reviews on authentication, authorization, and access control
• Own the lifecycle of findings from audits, pentests, code scanning, and bug bounty
• Triage, prioritize, track remediation, and verify fixes
• Set severity and SLA standards and enforce them
• Run bug bounty intake and validate external reports against source
• Coordinate with audit partners and scope internal assessments
• Tune and extend SAST, dependency, secrets, and container scanning in CI/CD
• Review IAM, network controls, encryption, and secrets management across cloud environments
• Assess access of internal AI tools, MCP integrations, and agents in production
• Define product security standards, review checklists, and developer guidance

• 8+ years in product security, application security, or security engineering, built on a software engineering foundation
• Ownership of threat modeling and architecture review for complex financial or distributed systems
• Track record of finding critical, non-obvious vulnerabilities in large production codebases
• Experience with TypeScript, Rust, Go, or Python
• Experience with LLM and agent-based review workflows
• Experience building and running a vulnerability management program or bug bounty end to end
• Experience with CI/CD scanning
• Deep expertise in IAM, secrets management, network controls, and container security on AWS or a comparable provider
• Strong written communication and ability to work independently
• Experience reviewing Solana programs (Rust/Anchor), working at an audit firm, cryptography and key management (HSMs, MPC, PKI), offensive testing across web and mobile, red teaming AI systems, or supporting SOC 2 from the product side is a plus

• Equity
• Remote work in North America or Europe