{"id":126339,"url":"https://alion.io/job/digital-asset-appsec-engineer","title":"AppSec Engineer","company":{"id":47589,"name":"Digital Asset","domain":"digitalasset.com","url":"https://alion.io/company/digital-asset","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":189000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":425},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-06-30T22:20:04Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-16T20:51:52Z","board_verified":true,"closed_at":null,"days_open":107,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":107},"description":"About Digital Asset & the Canton Network\nDigital Asset builds the technologies that are reshaping the foundations of financial markets. Our mission is to create the world’s most trusted, privacy-enabled, and interoperable digital infrastructure for global finance.\nAt the heart of this mission is the Canton Network - the blockchain purpose-built for institutional finance. Uniquely combining privacy, compliance, and scalability, Canton enables real-time, secure settlement across multiple asset classes. Governed by the Canton Foundation with participation from leading financial institutions, it is the proven link between the promise of blockchain and the power of global finance.\nFounded in 2014 and headquartered in New York City, with offices in London, Zurich, Budapest, Hong Kong, and Sydney- we are on a mission to transform finance- and that transformation is now playing out rapidly on the Canton Network.\nIf you’re interested in playing a crucial role at the intersection of traditional and crypto-capital markets and want to help bring the next trillion dollars of finance on-chain, join us.\nAbout the role:\nDigital Asset enables mission critical workflows in the financial industry through development using Daml and runs on the Canton ledger and the Canton Network. The security team supports this mission by providing infrastructure and application security guidance and tooling for DA products and services.\nResponsibilities:\nAs a Security Engineer, you will have the opportunity to shape our security posture in many domains including; application security, vulnerability management, IAM, cloud and network security, incident response, digital forensics, DevSecOps, etc.\nParticipate in and, in some cases, lead security incident response efforts, including initial containment, investigation, forensic analysis, and post-incident reporting.\nContribute to the secure design and architecture of new and existing systems, ensuring security is integrated from the start (Security by Design).\nParticipate in fostering a DevSecOps culture in the company\nCollaborate with other teams to facilitate adoption of security processes and tooling\nWhat We're Looking For:\nVulnerability & Threat Management: Proven ability to perform vulnerability assessments and run penetration tests, interpret the results, and prioritize remediation efforts. Experience with threat modeling and threat intelligence is also key.\n Cloud Security: Working knowledge of securing Google Cloud (and AWS, Azure). This includes identity and access management (IAM), GKE, and Cloud Armor, logging, and data protection in the cloud.\n Scripting and Automation: Proficiency in scripting language (e.g., Python, GoLang, or Bash) to automate security tasks, analyze logs, and develop custom tools.\n Kubernetes and Container Hardenin g: Expertise in securing GKE cluster components, including leveraging native features like Pod Security Standards (PSS) enforcement, and Network Policies to control Pod-to-Pod traffic and runtime security observability.\n AppSec Security: Integrating security checks (SAST/DAST, dependency scanning, SCA) into CI/CD pipelines, and hardening build infrastructure and workflows.\nStrong oral and written communication skills, ideally experience writing technical documentation and specifications.\nSome experience with cryptographic keys, KMS, HSMs\n3-7 years of experience in IT and application security.\nBachelor’s Degree Cyber Security, Computer Science or related field.\nBased in the NY/NJ/CT tri-state area\nThe range below may vary if based outside the New York tri-state area (New York, New Jersey, and Connecticut). Base salaries are determined during our interview process, during which we assess the candidate's experience, skills, and capabilities against internal peers and the scope and responsibilities of the position.\nUS Pay Transparency\n$160,000—$190,000 USD\n#LI-Hybrid\nAt Digital Asset, we are committed to compensation structures that reward impact consistently across our global teams. We support our people at every stage of life with comprehensive, family-forward benefits and flexible working models designed to help you do your best work.\nBenefits We offer a comprehensive benefits package designed to support the well-being of our team members. Health and insurance benefits vary by region to ensure local relevance and compliance, and may include medical, dental, and vision coverage. \nEqual Opportunity EmployerDigital Asset is an equal opportunity employer committed. All qualified applicants will receive consideration for employment without regard to race, color, national origin, sex, religion, sexual orientation, age, disability, citizenship status, veteran status, or any other basis protected by applicable law.\nEmployment Eligibility If and as required by applicable law, all persons hired to work at Digital Asset will be required to verify identity and eligibility to work in the location for which they have an offer to work and to complete the necessary employment eligibility verification documents upon hire.\nAccommodations Applicants with disabilities who require accommodation during the application or interview process should contact .\nCalifornia Privacy Act (CCPA) If you are based in California, we encourage you to read this important information for California residents linked here.","description_format":"text","description_chars":5359,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Blockchain & Crypto","Blockchain Infrastructure","Asset Tokenization"],"lifecycle":[{"event":"open","at":"2026-06-30T22:20:04Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":30,"band":"fade","label":"Fading","p_open":1,"p_active":0.673,"p_room":0.44,"age_days":107,"expected_fill_days":80,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/digital-asset-appsec-engineer","json_url":"https://alion.io/job/digital-asset-appsec-engineer.json","meta":{"generated_at":"2026-10-16T21:44:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2914,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47589},"rest":"https://alion.io/mcp/rest/get_company?id=47589"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdigital-asset-appsec-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdigital-asset-appsec-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdigital-asset-appsec-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/digital-asset-appsec-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdigital-asset-appsec-engineer"}]}