{"id":456905,"url":"https://alion.io/job/ether-fi-security-engineer","title":"Security Engineer","company":{"id":175614,"name":"ether.fi","domain":"ether.fi","url":"https://alion.io/company/ether-fi","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":86,"open_postings":11,"ghost_share":0,"stale_share":0.545,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Denver, United States","New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":116000,"max_usd":221000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CircleCI","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Least Privilege","optional":false},{"name":"npm","optional":false},{"name":"Threat Modeling","optional":false},{"name":"DeFi","optional":true},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-09-02T18:29:50Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-10-27T21:49:38Z","board_verified":true,"closed_at":null,"days_open":55,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":54},"description":"About the Role:\nWe're looking for a Security Engineer who is equally at home hardening a CI/CD pipeline, reviewing a change to the authentication system on the backend, and triaging a bug bounty submission before lunch.This is a hands-on, builder-first role - not a governance checkbox. You'll own security operations end-to-end, embedded directly into the engineering team and working closely with infrastructure, protocol and platform.\nIf you treat threat modeling as a design conversation and not a compliance exercise, you're our kind of person. You should only apply for this role if you are ready to come into the office every day and work in person with our team!\nWhat You'll Do:\nSecurity Operations\nOwn day-to-day security operations: monitoring, alerting, triage, and response\n\nManage and monitor endpoint security via an EDR system - tune detections, investigate alerts, and drive incidents to resolution\n\nLead identity lifecycle management, including employee onboarding and off boarding (access provisioning, key rotation, deprovisioning)\n\nBug Bounty & Vulnerability Management\nBe the primary owner of our ImmuneFi program - triaging, reproducing, and responding to incoming submissions daily\n\nPrioritize and track vulnerabilities through to remediation in close collaboration with protocol and engineering teams\n\nDevelop internal tooling and processes to make the bounty workflow faster and more consistent\n\nDevSecOps & Pipeline Hardening\nAudit and harden CI/CD pipelines - secrets management, supply chain integrity, SAST/DAST integration, build provenance\n\nOwn dependency security: identify and remediate vulnerable packages across repositories (yes, including the npm dependency hell)\n\nEstablish and enforce security standards across the SDLC\n\nInfrastructure Security\nPartner with the infrastructure team to review and harden cloud environments (access controls, network segmentation, least privilege, logging)\n\nContribute to threat modeling for new systems and architectural changes\n\nDrive implementation of security tooling across the stack\n\nVendor & External Partner Management\nOwn relationships with external security vendors and service providers - holding them accountable toSLAs, managing scope, and ensuring findings are actioned\n\nEvaluate and onboard new security tooling as the team and threat landscape evolve\n\nWhat We're Looking For:\n5+ years of experience in software and security engineering, with meaningful time in a DevSecOps or security operations context\n\nStrong software engineering fundamentals - you're a builder who writes code, not just policy\n\nHands-on experience hardening CI/CD pipelines (GitHub Actions, CircleCI, or similar) and cloud infrastructure (AWS, GCP, or equivalent)\n\nProficiency with endpoint security tooling (CrowdStrike or equivalent EDR)\n\nComfort owning identity and access management processes, including onboarding/offboarding workflows\n\nStrong communication skills - you can write a clear triage report, give direct feedback to a developer and explain risk to a non-technical stakeholder\n\nNice to Have:\nYou were a traditional software engineer before specializing in security\n\nPrior experience at a DeFi protocol, crypto exchange, or blockchain infrastructure company\n\nCTF/security competition background\n\nContributions to open-source security tooling\n\nWhat Success Looks Like:\nIn your first 90 days, you've mapped our attack surface, established a daily rhythm on ImmuneFi, and shipped at least a few meaningful PRs across the full stack. Within six months, you've built enough trust in the team that engineers come to you before shipping sensitive PRs, not after.","description_format":"text","description_chars":3627,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DeFi","Blockchain Infrastructure"],"lifecycle":[{"event":"open","at":"2026-09-06T09:56:33Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.342,"p_room":0.35,"age_days":54,"expected_fill_days":26,"reasons":["conf:1","stale_co","win:tail"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/ether-fi-security-engineer","json_url":"https://alion.io/job/ether-fi-security-engineer.json","meta":{"generated_at":"2026-10-27T22:50:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14666,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175614},"rest":"https://alion.io/mcp/rest/get_company?id=175614"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fether-fi-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fether-fi-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fether-fi-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ether-fi-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fether-fi-security-engineer"}]}