> Markdown version of [/jobs/ext/2735490-security-engineer](https://www.wearedevelopers.com/jobs/ext/2735490-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Ether, LLC - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing, Cyber Security, Continuous Integration, Github, Key Management, Network Segmentation, Open Source Technology, Systems Development Life Cycle, Role-Based Access Control, Blockchain, Software Vulnerability Management, Circleci, Data Logging, Cloud Platform System, Backend, Devsecops, Static Application Security Testing, Dynamic Application Security Testing - **Published:** September 5, 2026 - **Apply:** https://startup.jobs/security-engineer-etherfi-8304098 ## About the Role 5-8+ years of experience in software and security engineering, with meaningful time in a DevSecOps or security operations context Strong software engineering fundamentals - you're a builder who writes code, not just policy Hands-on experience hardening CI/CD pipelines (GitHub Actions, CircleCI, or similar) and cloud infrastructure (AWS, GCP, or equivalent) Proficiency with endpoint security tooling (CrowdStrike or equivalent EDR) Comfort owning identity and access management processes, including onboarding/offboarding workflows Strong communication skills - you can write a clear triage report, give direct feedback to a developer and explain risk to a non-technical stakeholder Nice to Have: You were a traditional software engineer before specializing in security Prior experience at a DeFi protocol, crypto exchange, or blockchain infrastructure company CTF/security competition background, In your first 90 days, you've mapped our attack surface, established a daily rhythm on ImmuneFi, and shipped at least a few meaningful PRs across the full stack. Within six months, you've built enough trust in the team that engineers come to you before shipping sensitive PRs, not after. ## Description We're looking for a Security Engineer who is equally at home hardening a CI/CD pipeline, reviewing a change to the authentication system on the backend, and triaging a bug bounty submission before lunch.This is a hands-on, builder-first role - not a governance checkbox. You'll own security operations end-to-end, embedded directly into the engineering team and working closely with infrastructure, protocol and platform. If you treat threat modeling as a design conversation and not a compliance exercise, you're our kind of person. You should only apply for this role if you are ready to come into the office every day and work in person with our team! What You'll Do: Security Operations Own day-to-day security operations: monitoring, alerting, triage, and response Manage and monitor endpoint security via an EDR system - tune detections, investigate alerts, and drive incidents to resolution Lead identity lifecycle management, including employee onboarding and off boarding (access provisioning, key rotation, deprovisioning) Bug Bounty & Vulnerability Management Be the primary owner of our ImmuneFi program - triaging, reproducing, and responding to incoming submissions daily Prioritize and track vulnerabilities through to remediation in close collaboration with protocol and engineering teams Develop internal tooling and processes to make the bounty workflow faster and more consistent DevSecOps & Pipeline Hardening Audit and harden CI/CD pipelines - secrets management, supply chain integrity, SAST/DAST integration, build provenance Own dependency security: identify and remediate vulnerable packages across repositories (yes, including the npm dependency hell) Establish and enforce security standards across the SDLC Infrastructure Security Partner with the infrastructure team to review and harden cloud environments (access controls, network segmentation, least privilege, logging) Contribute to threat modeling for new systems and architectural changes Drive implementation of security tooling across the stack Vendor & External Partner Management Own relationships with external security vendors and service providers - holding them accountable toSLAs, managing scope, and ensuring findings are actioned Evaluate and onboard new security tooling as the team and threat landscape evolve ## Related Videos - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) - [Developing the Backend with Stefan Lingler, CTO at Shpock](https://www.wearedevelopers.com/videos/100360-developing-the-backend-with-stefan-lingler-cto-at-shpock) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Serverless: Past, Present and Future](https://www.wearedevelopers.com/videos/34-serverless-past-present-and-future) - [Nest.js - TypeScript in the backend can also be clean](https://www.wearedevelopers.com/videos/1033-nest-js-typescript-in-the-backend-can-also-be-clean) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)