> Markdown version of [/jobs/ext/2715219-lead-security-engineer](https://www.wearedevelopers.com/jobs/ext/2715219-lead-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Security Engineer

- **Company:** PAXOS LAW P.C.
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Key Management, Network Security, Security Software, Systems Integration, Cloud Platform System, Build Management, Vulnerability Analysis
- **Published:** September 4, 2026
- **Apply:** https://startup.jobs/lead-security-engineer-paxos-labs-8297877

## About the Role

* Deep knowledge of cloud infrastructure and web2 security practices.
 * Deep knowledge of cybersecurity standards and social engineering defenses.
 * Experience building full stack applications.
 * Deep Knowledge of the EVM security tooling, testing, and best practices
 * Deep knowledge of common hacks and exploits in DeFi protocols.
 * Deep knowledge of financial attack vectors in DeFi protocols.
 * Experience with CTFs, bugbounties, whitehat activities.

## Description

* Conduct internal audits of Cloud (Azure, AWS) platform security and implement best practices around key management, network security, monitoring, etc.
 * Create threat models for first party and third party software, research possible vulnerabilities and patch them.
 * Collaborate closely with infrastructure engineers to detect, fix, and prevent future exploits by creating resuable tools and processes.

Operational Security

 * Develop tooling and SOPs such as incident response manuals.
 * Conduct periodic incident response training for team members. Simulating hacks, alerts, and social engineering vectors.
 * Collaborate closely with both the technical and the non-technical staff to secure non-code related attack vectors and protect the weakest link i.e. the humans involved.

Smart Contract / DeFi Security

 * Collaborate closely with the Smart Contract team to conduct internal audits and to set up secure operational practices for the development and maintenance of smart contract protocols..
 * Build and deploy full stack tools for mitigating exploits and financial risks such as
 + Detecting malicious transactions in the mempool and automating pauses across the smart contracts deployed on multiple chains.
 + Defining invariants and detecting violations in realtime.
 + Integrating third party security software where necessary.


## Related Videos

- [This Machine Ends Data Breaches](https://www.wearedevelopers.com/videos/574-this-machine-ends-data-breaches)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Pragmatic Blockchain Design Patterns: Integrating Blockchain into Business Processes](https://www.wearedevelopers.com/videos/1579-pragmatic-blockchain-design-patterns-integrating-blockchain-into-business-processes)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)