{"id":456768,"url":"https://alion.io/job/agora-senior-security-engineer","title":"Senior Security Engineer","company":{"id":175455,"name":"Agora","domain":"agora.finance","url":"https://alion.io/company/agora-4","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Gem","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"UTC-8 – UTC-5","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":216000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":390},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"Docker","optional":false},{"name":"GitOps","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"Node JS","optional":false},{"name":"Pulumi","optional":false},{"name":"React.js","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Grafana","optional":true},{"name":"PostgreSQL","optional":true},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-09-02T09:43:00Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-10-27T00:53:06Z","board_verified":true,"closed_at":null,"days_open":54,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":54},"description":"ABOUT AGORA\nAt Agora, our mission is to transform how money moves. We believe stablecoins will underpin a new financial fabric, one that is faster, more global, and more efficient than today's siloed systems. That is why we are building AUSD and the Agora stack, a full service platform that makes issuing, managing, and integrating stablecoins seamless, whether you're a developer, fintech, or institution. With AUSD, stablecoins become programmable, composable, and ubiquitous by default.\nWe believe digital dollars should be a public good: trusted, accessible, and built for real-world utility. Our mission is to drive adoption through customizable, user-friendly on-ramps that make stable, dollar-based value available onchain.\nWe're backed by world-class investors including Paradigm and Dragonfly, and we're growing a team to reimagine how value moves online.\nWe're intentional about who we bring on. If you're passionate about security and want to help us build a safe environment for people to engage with money, let's talk.\nABOUT THE TEAM\nAgora combines the discipline required to operate financial infrastructure with the pace and creativity of a crypto-native startup. We are a small, mission-driven team that values clear thinking, extreme ownership, attention to detail, and high-velocity decision-making.\nThe Security team works directly with Engineering, Product, Infrastructure, Compliance, and Operations to manage risk without creating unnecessary friction. We operate in short feedback loops and expect security engineers to understand systems deeply, make pragmatic decisions, and help teams ship securely.\nJOB SUMMARY\nWe are looking for a Senior Security Engineer to help secure the products and services Agora builds and operates.\nYou will be the Security team's primary technical partner to Engineering. You will work alongside engineers from initial design through production operation: building and reviewing controls, architectures, code, infrastructure, and configuration; identifying meaningful risks; and helping teams implement practical solutions.\nYou will also play a hands-on role in Agora's security monitoring program. You will identify the telemetry and detections needed to protect our systems, implement and tune alert rules, investigate security events, and work closely with our SOC and internal teams during incident response.\nThis is a broad ownership role. You should be equally comfortable reviewing an API authorization model, reasoning about an AWS or Kubernetes deployment, tuning a security scanner, investigating suspicious production activity, and driving a vulnerability through remediation.\nAgora's environment includes TypeScript and Node.js services, React applications, REST APIs, relational databases, Docker, Kubernetes on AWS, Pulumi infrastructure as code, Argo CD and GitOps, Cloudflare, and blockchain infrastructure. You do not need to arrive as an expert in every part of the stack, but you should be able to learn unfamiliar systems quickly and evaluate them from first principles.\nWe prefer candidates located close to Eastern Time, while welcoming exceptional engineers across Pacific Time through ET+2. Regardless of where you are located, your working hours will need to have a majority overlap with ET business hours.\nKEY RESPONSIBILITIES\nPartner with Engineering and Product throughout the development lifecycle, from early design and threat modeling through launch and ongoing operation.\nPerform security reviews of system designs, application code, APIs, infrastructure as code, cloud environments, Kubernetes workloads, deployment pipelines, and production configurations.\nIdentify vulnerabilities and design weaknesses, communicate their impact clearly, and work with engineers on pragmatic remediation.\nServe as a trusted security subject-matter expert for application security, cloud and container security, identity and access management, secrets management, API security, data protection, and secure software development.\nDevelop reusable security guidance, secure patterns, review checklists, and engineering standards that make the secure approach easier to adopt.\nAdminister and improve Agora's security tooling, including AI-assisted security tools, SAST, DAST, software composition analysis, container and infrastructure-as-code scanning, CSPM, security monitoring, and related capabilities.\nIntegrate security controls into developer workflows and CI/CD pipelines; tune rules, reduce noise, improve coverage, and ensure findings lead to action.\nTranslate threat models and known attack paths into concrete logging, monitoring, and detection requirements.\nIdentify gaps in application, cloud, identity, infrastructure, and blockchain-related security telemetry, then work with engineering teams to address them.\nDesign, implement, test, document, and tune security alert rules and detection logic.\nTriage and investigate security detections, correlate activity across relevant data sources, and determine scope, impact, severity, and required response.\nWork closely with Agora's SOC to improve alert quality, escalation criteria, investigation procedures, and response runbooks.\nParticipate in security incident response, including investigation, containment, eradication, recovery, stakeholder coordination, and evidence preservation.\nLead or contribute to post-incident reviews and ensure lessons learned result in durable improvements to architecture, controls, monitoring, and operational processes.\nOwn the day-to-day execution of the vulnerability management program, including intake, validation, risk-based prioritization, assignment, remediation tracking, exception management, verification, and reporting.\nSupport third-party penetration tests, code reviews, architecture assessments, and other independent security engagements, from scoping and reviewer selection through remediation and closure.\nAssess the security implications of new vendors, technologies, integrations, and architectural changes.\nBuild lightweight automation and metrics that improve security visibility, shorten investigation and remediation time, and help leadership understand material risk.\nContribute to Agora's product security, platform security, detection engineering, vulnerability management, and incident-readiness roadmaps.\nBASIC QUALIFICATIONS\n5+ years of hands-on experience in product security, application security, cloud security or a closely related security engineering role.\nStrong software engineering fundamentals and the ability to review application code. Experience with TypeScript, Node.js, JavaScript, or another modern language is especially relevant.\nExperience reviewing web applications, backend services, REST APIs, authentication and authorization systems, and relational database designs.\nPractical knowledge of common application and API vulnerabilities, threat-modeling techniques, secure design principles, and modern identity patterns.\nExperience securing AWS environments, containerized workloads, Kubernetes, infrastructure as code, and CI/CD or GitOps workflows.\nHands-on experience implementing or administering security tools such as SAST, DAST, SCA, CSPM, container scanning, secrets detection, infrastructure-as-code scanning, SIEM, or cloud-native detection platforms.\nExperience developing or tuning security detections using application, cloud, identity, network, and infrastructure telemetry.\nStrong investigation skills, including the ability to analyze logs and system activity, develop and test hypotheses, establish timelines, and determine the scope and impact of suspicious behavior.\nExperience working with SOC, including alert escalation, investigation handoffs, runbook development, and detection-quality improvement.\nExperience participating in security incident response and coordinating effectively with engineering and operational teams under time pressure.\nExperience operating a vulnerability management process and driving remediation across multiple engineering teams.\nAbility to evaluate findings and detections based on exploitability, confidence, and business impact rather than relying exclusively on automated severity.\nExperience working with external penetration testers, auditors, or specialist security reviewers.\nStrong written and verbal communication skills, including the ability to explain technical risk and incident status clearly to technical and non-technical stakeholders.\nHigh autonomy and sound judgment. You can take an ambiguous concern, investigate it deeply, propose a path forward, and close the loop.\nA collaborative, low-ego approach to security. You build trust with engineers while maintaining a high bar for systems protecting financial assets and sensitive data.\nPREFERRED QUALIFICATIONS\nExperience securing fintech, payments, digital-assets or other high-assurance financial platforms.\nFamiliarity with blockchain systems, smart-contract integrations, transaction flows, custody models, signing infrastructure, or cryptographic key management.\nExperience with TypeScript, Pulumi, AWS, Argo CD, Cloudflare, PostgreSQL, Prometheus, or Grafana.\nExperience with incident-response tooling, security data pipelines, log normalization, detection-as-code, or automated enrichment and response.\nExperience defining operational metrics such as detection coverage, false-positive rate, investigation time, and mean time to contain.\nExperience designing security controls for distributed, event-driven, multi-tenant, or high-availability systems.\nAbility to create security automation, internal tools, or CI/CD integrations using code.\nExperience applying AI-assisted tools to security investigations, detection engineering, or secure development.\nRelevant offensive-security, incident-response and cloud-security experience or certifications.\nAgora operates a centralized USD-pegged stablecoin platform with robust compliance, security, and governance. We are equally committed to fostering a diverse, inclusive, and equitable workplace.\nWe are an Equal Employment Opportunity Employer. We do not discriminate based on race, color, ancestry, national origin, religion or creed, mental or physical disability, medical condition, genetic information, sex (including pregnancy, childbirth, and related conditions), gender identity or expression, sexual orientation, age, marital status, military or veteran status, citizenship, or any other characteristic protected under applicable federal, state, or local law.","description_format":"text","description_chars":10462,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cryptocurrencies","Stablecoins"],"lifecycle":[{"event":"open","at":"2026-09-06T09:52:26Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.577,"p_room":0.45,"age_days":53,"expected_fill_days":29,"reasons":["conf:0","win:tail"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/agora-senior-security-engineer","json_url":"https://alion.io/job/agora-senior-security-engineer.json","meta":{"generated_at":"2026-10-27T03:30:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2839,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175455},"rest":"https://alion.io/mcp/rest/get_company?id=175455"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fagora-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fagora-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fagora-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/agora-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fagora-senior-security-engineer"}]}