{"id":4044753,"url":"https://alion.io/job/dfns-staff-product-security-engineer","title":"Staff Product Security Engineer","company":{"id":175593,"name":"Dfns","domain":"dfns.co","url":"https://alion.io/company/dfns","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Deel","truth_index":{"grade":"B","score":78,"open_postings":8,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Paris, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"PKI","optional":false},{"name":"Rust","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"ISO 27001","optional":true},{"name":"Smart Contracts","optional":true},{"name":"SOC 2","optional":true},{"name":"Solana","optional":true}],"status":"live","first_seen_at":"2026-11-10T20:06:55Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T23:28:29Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Staff Product Security Engineer\nUnited States, remote first with NY office available · Full-time · Security · Reports to CISO\nAbout DFNS\nFinance is moving onchain. Stablecoins, tokenized deposits, securities and funds are changing how money and assets are issued, held and transferred. The destination is a financial system where any asset can be issued, moved and governed onchain with the controls regulated institutions require. That shift needs a new foundation. Just as core banking systems manage accounts and ledgers today, financial institutions need a platform to manage digital assets. DFNS is that platform. Today, we secure hundreds of billions of dollars in assets every month for more than 500 clients worldwide.\nWhy this role\nOur platform secures a lot of value. Every code path, dependency and deployment is a potential route to that value. The record we are protecting is zero breaches. You will own the security of the product itself, from threat models and architecture reviews to the secure development lifecycle, pentests, bug bounty and incident response. In year one you will put automated security gates into CI/CD, threat model the signing path and the governance model end to end and become the engineer our clients’ security teams want in the room during due diligence.\nWhat you’ll do\nOwn product security across the platform, from threat modeling and design reviews to code review and dynamic testing.\n\nBuild the secure development lifecycle into CI/CD, with SAST and DAST, dependency and supply chain controls (SBOM, signing, provenance) and secrets scanning running as automated gates.\n\nLead vulnerability management for the product, from triage and prioritization to fix verification and security releases, with Engineering.\n\nRun the external pentest program and the bug bounty, and work directly with researchers.\n\nLead incident response for product security events, from detection and containment to forensics, post-mortems and the controls that follow.\n\nRepresent our security in client due diligence and audits, from security questionnaires and pentest reports to architecture sessions with bank security teams.\n\nRaise the bar for every engineer through secure coding guidance, training and reusable security patterns and libraries.\n\nWhat you bring\nMust-haves\nHands-on application security on production systems that handle money or sensitive data, including threat modeling, code review and finding and fixing real vulnerabilities.\n\nAbility to read and write TypeScript and Rust (or Go) well enough to review and fix security issues yourself.\n\nExperience building security into CI/CD, including SAST and DAST, dependency and supply chain controls and secrets management.\n\nApplied cryptography fluency. You know how keys, signatures, TLS and PKI get misused in practice and you can review an MPC or HSM integration without designing the protocol yourself.\n\nCloud security on AWS, including IAM, networking and KMS or Nitro Enclaves.\n\nExperience running pentests or a bug bounty and leading incident response.\n\nCommunication that works with engineers and with external security teams such as bank CISOs and auditors.\n\nNice-to-haves\nSmart contract security on EVM or Solana.\n\nExperience with MPC or threshold signature systems, or with HSMs.\n\nPublished research, CVEs or conference talks.\n\nExperience producing SOC 2 or ISO 27001 evidence for secure development controls.\n\nHow we work\nWe are a distributed company headquartered in Paris. Our teams work from Europe, the US and Asia, with offices in New York, Geneva, Dubai, Singapore, Hong Kong and São Paulo. We write decisions down so they survive time zones. We hold our own work to the standards our clients are held to. We hire people who can own an outcome end to end and we give them the room to do it.\nWhat we offer\nA competitive base salary set by role and location, a bonus or variable plan where the role carries one and stock options vesting over four years. Healthcare, flexible vacation, parental leave and a one-time home technology allowance, with travel expenses covered. A MacBook and the equipment you need to do your best work. Remote first, with an office if you want one.\nBase salary range: $150,000-250,000\nHiring process\nWe aim to complete the process in 2 weeks and we tell you where you stand after every step.\nIntro call with Co-CEO (30 minutes).\n\nPersonality and cognitive assessments, completed on your own time (45 minutes).\n\nA technical take-home exercise\n\nFocus Interviews (about 3 hours): CISO (30 minutes), technical exercise (45 minutes), general security (45 minutes), design security (45 minutes) and culture fit (30 minutes).\n\nReference calls and background checks.\n\nEqual opportunity\nDFNS is an equal opportunity employer and considers every applicant based on ability and potential, regardless of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, disability, age or any other characteristic protected by law. If you need an accommodation at any point in the process, tell us and we will arrange it.","description_format":"text","description_chars":5067,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Apple Macbook","Parental leave","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain Infrastructure","Crypto Wallets"],"lifecycle":[{"event":"open","at":"2026-11-10T23:28:29Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":40,"reasons":["conf:3","win:early"],"computed_at":"2026-11-11T03:02:13Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/dfns-staff-product-security-engineer","json_url":"https://alion.io/job/dfns-staff-product-security-engineer.json","meta":{"generated_at":"2026-11-11T03:02:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1838,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175593},"rest":"https://alion.io/mcp/rest/get_company?id=175593"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdfns-staff-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdfns-staff-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdfns-staff-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dfns-staff-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdfns-staff-product-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4044753}},{"tool":"search_jobs","arguments":{"company":"dfns.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4044753},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}