Senior IT Security Engineer (Web3)
ΠΡΡΡ & Π‘ΠΎΠΏΡΠΎΠ²ΠΎΠ΄
ΠΠ»Ρ ΠΌΡΡΡΠ° Ρ ΡΡΠΎΠΉ Π²Π°ΠΊΠ°Π½ΡΠΈΠ΅ΠΉ Π½ΡΠΆΠ΅Π½ Plus
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²Π°ΠΊΠ°Π½ΡΠΈΠΈ
TL;DR
Senior IT Security Engineer (Web3): Owning and maturing the enterprise security program with an accent on identity, endpoint, and SaaS security across a global team. Focus on managing IAM, EDR, and MDM solutions, auditing cloud infrastructure, and ensuring compliance with ISO 27001 and SOC 2.
Location: Remote (Global, no location restrictions)
Company
Non-profit organization dedicated to the adoption, decentralization, and security of the Solana high-performance blockchain network.
What you will do
- Own the deployment, configuration, and ongoing management of the centralized identity and access management (IAM) platform.
- Configure and manage EDR and MDM solutions across the global endpoint fleet to enforce secure baseline configurations.
- Manage secure configuration and governance across the SaaS application fleet and modern tech stacks including GitHub, AWS, and GCP.
- Implement access control systems and internal data security practices based on security standards defined by the CISO.
- Operate vulnerability management solutions, including scanning, triage, and remediation tracking.
- Maintain and improve compliance with security frameworks such as ISO 27001 and SOC 2.
Requirements
- Strong experience in infrastructure and enterprise security, including governance, access control, and vulnerability management.
- Hands-on experience deploying and managing SSO, EDR, and MDM tooling.
- Proficiency in scripting (Python, Go, or Bash) to automate security workflows and integrations.
- Experience managing a global fleet of endpoints and securing cloud infrastructure (AWS, GCP, GitHub).
- Experience working within security frameworks like ISO 27001 or SOC 2.
- Strong communication skills and ability to operate autonomously across multiple time zones.
Nice to have
- Experience working across both traditional Web2 operational security and Web3/crypto environments.
- Experience securing custody, key management, or other crypto-specific infrastructure.
ΠΡΠ΄ΡΡΠ΅ ΠΎΡΡΠΎΡΠΎΠΆΠ½Ρ: Π΅ΡΠ»ΠΈ ΡΠ°Π±ΠΎΡΠΎΠ΄Π°ΡΠ΅Π»Ρ ΠΏΡΠΎΡΠΈΡ Π²ΠΎΠΉΡΠΈ Π² ΠΈΡ ΡΠΈΡΡΠ΅ΠΌΡ, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡ iCloud/Google, ΠΏΡΠΈΡΠ»Π°ΡΡ ΠΊΠΎΠ΄/ΠΏΠ°ΡΠΎΠ»Ρ, Π·Π°ΠΏΡΡΡΠΈΡΡ ΠΊΠΎΠ΄/ΠΠ, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡΠ΅ ΡΡΠΎΠ³ΠΎ - ΡΡΠΎ ΠΌΠΎΡΠ΅Π½Π½ΠΈΠΊΠΈ. ΠΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΠΎ ΠΆΠΌΠΈΡΠ΅ "ΠΠΎΠΆΠ°Π»ΠΎΠ²Π°ΡΡΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡΠΈΡΠ΅ Π² ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΡ. ΠΠΎΠ΄ΡΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β