{"id":2867896,"url":"https://alion.io/job/cari-network-remote-staff-security-engineer","title":"[Remote] Staff Security Engineer","company":{"id":4430112,"name":"Cari Network","domain":"cari.com","url":"https://alion.io/company/cari-network","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":151000,"max_usd":268000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":96},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"SIEM","optional":false},{"name":"Smart Contracts","optional":false},{"name":"SOC 2","optional":false},{"name":"Solidity","optional":false},{"name":"ZkSync Era","optional":false},{"name":"Kubernetes","optional":true}],"status":"closed","first_seen_at":"2026-10-19T17:50:58Z","employer_posted_date":null,"last_verified_at":"2026-10-20T00:20:00Z","board_verified":false,"closed_at":"2026-10-20T00:20:00Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Note: The job is a remote job and is open to candidates in USA. Cari Network is building a blockchain-based payment system for real-time movement of digital money. The Staff Security Engineer will build and lead the security program, protecting identity, cloud, detection, blockchain infrastructure, and payment operations while driving incident response and compliance readiness.\n\nResponsibilities\nOwn identity end to end. Roll out SSO and automated joiner-mover-leaver lifecycle management across corporate and production systems. Design the role and entitlement model, run periodic access reviews, and make least privilege the default\nSecure blockchain and signing infrastructure. Partner with engineering to threat-model and harden our Solidity smart contracts, private ZKsync L2 nodes, and custody platform integrations. Define upgrade governance for on-chain systems\nBuild detection from the ground up. Deploy and own our SIEM, onboarding and normalizing logs across cloud, identity, endpoint, and application layers. Build high-signal detections for authentication abuse, control plane activity, privilege escalation, data movement, and anomalous transactions. You own alert quality, not alert volume\nLead incident response. Serve as technical lead for alerting, vulnerability management, and threat response. Write containment runbooks, drive investigations through postmortem, and feed lessons back into detection\nHarden AWS. Enforce least-privilege IAM, network segmentation, and secrets management across ECS/EKS, MSK, and RDS\nMake security part of shipping. Build automated security gates into CD pipelines and developer workflows, so security keeps pace with delivery\nDrive compliance readiness. Work with the CISO to implement and document controls for bank-level governance, third-party risk, and audits such as SOC 2 Type II\nComply with all Cari information security policies, including the Acceptable Use Policy, and complete required security awareness training\nProtect the confidentiality, integrity, and availability of Cari systems and data, including bank-partner and customer information, consistent with least-privilege access principles\n\nSkills\n8+ years in information security, DevSecOps, or infrastructure security\nDeep ownership of at least two of these areas, with hands-on experience in the third:\nEnterprise IAM: SSO, federation, automated provisioning and deprovisioning, role and entitlement design, and access reviews\nSIEM and detection: deployment, tuning, log onboarding, and detection authoring. You can point to detections you've written and explain how you kept them useful\nAWS security: ECS or EKS, MSK, RDS, IAM, VPC, and Secrets Manager\nExperience securing EVM-compatible blockchain or Web3 infrastructure\nExperience securing CD pipelines (GitHub Actions or equivalent) and containerized workloads\nIncident response leadership\nComfort working with high autonomy on a small team building a security program from scratch\nSolidity smart contract reviews, including upgradeable proxies (such as UUPS) and role governance\nDefensive knowledge of L2s, cross-chain bridges, ZK rollups, and EVM transaction mechanics (ABI encoding, calldata validation, nonce management, event log integrity)\nKey management, custody APIs (Fireblocks, Turnkey, Fordefi), MPC signing, or real-time Web3 threat detection and transaction circuit breakers\nDetection-as-code: version-controlled, tested detections mapped to a framework\nTerraform, including auditing environments and codifying secure baselines\nU.S. banking regulation (FFIEC), or SOC 2 Type II and ISO 27001 audits\n\nBenefits\nBonus\nEquity\nFull medical, vision, dental benefits\n401(k) with company matching\nFlexible PTO\nRemote-first environment\nOpportunity to shape a market-defining protocol with an experienced founding team\n\nCompany Overview\nCari Network provides a blockchain platform for instant, tokenized bank deposit transfers. It was founded in undefined, and is headquartered in , with a workforce of 2-10 employees. Its website is https://www.cari.com/.\n\nCompany H1B Sponsorship\nCari Network has a track record of offering H1B sponsorships, with 1 in 2026. Please note that this does not guarantee sponsorship for this specific role.","description_format":"text","description_chars":4218,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Smart Contracts & Security"],"lifecycle":[{"event":"open","at":"2026-10-19T18:20:00Z"},{"event":"close","at":"2026-10-20T00:20:00Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/cari-network-remote-staff-security-engineer","json_url":"https://alion.io/job/cari-network-remote-staff-security-engineer.json","meta":{"generated_at":"2026-10-20T22:29:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26328,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4430112},"rest":"https://alion.io/mcp/rest/get_company?id=4430112"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcari-network-remote-staff-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcari-network-remote-staff-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcari-network-remote-staff-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cari-network-remote-staff-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcari-network-remote-staff-security-engineer"}]}