Security Engineer, Privy

About the role

In this position, you will play a crucial role in ensuring the security of a rapidly expanding platform. You will engage in hands-on investigations, take operational ownership, and develop code to address real-world challenges. Your work will span various areas including security operations, incident response, and application security.

Key facts

What you'll do

• Take full responsibility for security engineering tasks, including investigating alerts, identifying root causes, and documenting outcomes.
• Participate in the security on-call rotation to assist with incident responses and manage security escalations.
• Develop and maintain production-grade tools that streamline processes, such as automated triage and remediation workflows.
• Conduct thorough investigations into potential security breaches, gathering evidence and coordinating responses.
• Identify and address recurring operational challenges to enhance team efficiency and scalability.
• Collaborate with product and engineering teams to evaluate security risks and provide practical security recommendations.
• Contribute to various security domains within Privy, gaining broad knowledge while developing specialized expertise.

Requirements

• Proven experience as a security engineer or in a similar hands-on role within a challenging technical environment.
• Proficient in programming languages such as Python, Go, or Ruby, with the capability to create maintainable tools and contribute to production fixes.
• Experience in investigating security incidents, vulnerabilities, and other technical issues to resolution.
• Familiarity with security operations, incident response, and vulnerability management processes.
• Strong knowledge of web, browser, infrastructure, or cloud security principles.
• Ability to maintain composure under pressure and approach investigations methodically, even with incomplete information.
• Excellent communication and collaboration skills to convey technical findings and risks clearly to both clients and internal teams.
• Self-motivated with a proactive attitude towards identifying gaps and driving progress.

Nice to have

• Experience with cloud security environments such as AWS or GCP.
• Background in detection engineering, security automation, or incident-response tooling.
• Familiarity with bug bounty programs or offensive security practices.
• Knowledge of identity and access management, secrets management, and secure CI/CD processes.
• Experience in application security, infrastructure security, or cryptography.
• Familiarity with fintech, payments, or blockchain technologies.
• Experience in shaping security operations or vulnerability management workflows.

Skills & tools

• Python, Go, Ruby
• AWS, GCP
• Security operations tools
• Incident response frameworks
• Vulnerability management systems

Practical notes

• Visa sponsorship is not available for this role.
• Benefits include competitive salary, health insurance, and opportunities for professional development.
• Applications will be accepted until [insert application deadline].