Security Engineer (Web3)

Location: Remote in the USA

Salary: $165,000–$225,000 annual US base salary, plus tokens, equity compensation, benefits, and eligibility for annual equity and token refresh grants.

Company

hirify.global builds foundational infrastructure and products through Sui, Move, and related technologies for on-chain finance and the emerging agent economy.

What you will do

• Build and operate a security observability and data platform handling tens of terabytes per month, including ingestion, normalization, retention, querying, and tested detection logic.
• Own endpoint security across the fleet, including EDR deployment and tuning, binary authorization, and hardening baselines with IT Operations.
• Lead threat hunting, internal investigations, insider-threat work, and end-to-end incident response from triage through root cause analysis and preventive controls.
• Build and operate security services including zero-trust authentication and authorization, blocking services, application proxies, asset inventory, developer portals, and compliance as code.
• Build and run local and Kubernetes agent platforms using LLM agents for triage, enrichment, investigation, and response, with deterministic checks where required.
• Review Kubernetes, AWS/GCP, bare-metal, and CI-runner designs; support shared security services, red-team exercises, adversary emulation, runbooks, and post-mortems.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, or a relevant technical field, or equivalent practical experience.
• 5+ years of experience in security engineering, detection and response, or infrastructure/SRE with a security focus, including hands-on endpoint and cloud incident response.
• Hands-on EDR operation, detection writing and tuning, and knowledge of macOS and Linux internals, including persistence, credential theft, process injection, and living-off-the-land binaries.
• Experience operating telemetry pipelines and a SIEM or security data lake at TB scale, with strong SQL for detection logic over large datasets.
• Production engineering experience with Linux, containers, Kubernetes, at least one major public cloud, infrastructure as code, monitoring, and alerting.
• Proficiency in Python or Go, plus comfort with Rust or willingness to work with Rust.
• Working knowledge of SSO using OIDC/SAML, phishing-resistant MFA, device trust, session theft, and token theft.
• Strong written communication skills for running incident channels and writing post-mortems.
• Interest in the Web3 space is required.

Nice to have

• Experience building zero-trust access, identity-aware proxies, or policy engines.
• Experience with binary authorization or allowlisting at fleet scale.
• Familiarity with threat actors targeting crypto companies, including social engineering, fake campaigns, and supply-chain compromises.
• Digital forensics involving memory, disk, and macOS unified logs, plus malware analysis.
• Experience building security tooling with LLM agents, such as Claude Code skills or comparable systems.
• Compliance as code using CIS benchmarks and experience in ISO 27001 or SOC 2 environments.
• Security publications, conference talks, or open-source security tooling.

Culture & Benefits

• Remote-first work environment; the posting states that hiring is conducted across the world.
• US employee health insurance covering medical, dental, vision, dependents, HSAs, and FSAs.
• 18 weeks of paid parental leave, flexible paid time off, and 11 paid holidays per year.
• Wellbeing, mental health, counseling, family planning, gender-affirming care, fitness, nutrition, financial, and legal support programs.
• Short- and long-term disability, life, accident, traveler, and privacy protection coverage, plus a wellness stipend and 401(k).
• Team offsites and an annual all-company retreat.

Hiring process

• Employment is contingent on successfully completing a background check, which may verify employment history, education credentials, and criminal history.
• Technology-assisted tools, including artificial intelligence, may be used to help identify and evaluate candidates; final hiring decisions are made by human reviewers.