{"id":3151325,"url":"https://alion.io/job/phantom-staff-product-security-engineer-security-2","title":"Staff Product Security Engineer (Security)","company":{"id":27037,"name":"Phantom","domain":"phantom.ai","url":"https://alion.io/company/phantom-ai","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US","GB","CA"],"hiring_countries_total":3,"salary":{"min":200000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"AWS","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-23T03:50:08Z","employer_posted_date":null,"last_verified_at":"2026-10-23T03:50:08Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide.\n\nPhantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Phantom partners with many of the most trusted and influential names in finance like Hyperliquid, Stripe, Kalshi and Visa, to make the most popular and innovative financial products accessible to everyone.\n\nWe are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm.\n\nSecurity is core to Phantom’s product and the trust millions of users place in us. We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work—from code review and threat modeling to vulnerability discovery and security automation. We’re looking for strong security engineers with high agency who can identify the risks that matter, build practical solutions, and take ownership from initial discovery through verified remediation.\n\nThis is a hands-on, high-impact role spanning architecture, source code, testing, and production systems across Phantom’s mobile, web, and backend products. You’ll work directly with engineering and product teams, lead complex security initiatives, and build capabilities that scale across the company. At the Staff level, you’ll set technical direction and raise the bar for how Phantom designs, builds, and ships secure products.\n\nThis role is fully remote and open to candidates based in the US, UK and Canada.\n\nResponsibilities\n\nProduct Security Ownership: Partner with engineering teams to identify and address security risks across Phantom’s mobile applications, web products, APIs, and backend services.\n\nArchitecture and Threat Modeling: Lead security reviews for new products and major architectural changes, with particular attention to authorization boundaries, sensitive data, transaction integrity, key material, and third-party integrations.\n\nSecure Product Development: Embed practical security controls into the software development lifecycle, from design and implementation through testing, release, and production operation.\n\nCode Review and Security Testing: Perform AI assisted security code reviews and targeted testing of high-risk features. Build repeatable approaches that help find vulnerabilities before they reach production.\n\nSecurity Tooling: Develop and improve tooling that gives engineers fast, actionable security feedback without creating unnecessary friction. Use automation and AI-assisted workflows where they materially improve coverage or speed.\n\nSoftware Supply Chain Security: Harden CI/CD, build, and release systems against supply chain threats, including dependency risk, secrets exposure, build provenance, artifact integrity, and compromised developer or automation workflows.\n\nVulnerability Management: Triage findings from internal testing, researchers, bug bounty submissions, and third-party assessments. Work with owners to determine real-world impact and drive issues through verified remediation.\n\nIncident Response: Support the investigation of product security incidents and suspicious activity. Turn lessons from incidents into durable improvements to product architecture, detection, and engineering standards.\n\nTechnical Leadership: Establish product security patterns and expectations across engineering. At the Staff level, lead ambiguous, cross-functional initiatives and influence architecture beyond any single product team.\n\nQualifications\n\n5+ years of experience in product security, application security, security engineering, or software engineering, including experience operating at a senior or staff level.\n\nStrong understanding of web, mobile, API, and distributed-system security, including authentication, authorization, session management, cryptography, and common vulnerability classes.\n\nHands-on experience building or applying AI-assisted security tooling to test applications and APIs, combining automated analysis with source-code review and manual validation.\n\nDemonstrated ability to review production code in one or more languages such as TypeScript, JavaScript, Rust, Python and Go.\n\nExperience securing software supply chains and CI/CD systems, including dependencies, build infrastructure, secrets, artifacts, signing, and release integrity.\n\nExperience threat modeling complex products and translating security risks into concrete engineering requirements.\n\nStrong judgment when evaluating exploitability, business impact, and appropriate remediation.\n\nTrack record of partnering effectively with engineering and product teams while maintaining a high security bar.\n\nClear written and verbal communication, including the ability to explain technical risk to both engineers and non-security stakeholders.\n\nNice To Haves\n\nExperience securing consumer financial products, wallets, payments, or other systems where client integrity and transaction safety are critical.\n\nFamiliarity with blockchain systems, smart-contract interactions, transaction simulation, signing workflows, or self-custodial wallet architecture.\n\nExperience securing browser extensions or native mobile applications.\n\nExperience building and integrating application-security tooling, static or dynamic analysis, security test infrastructure, or policy-as-code controls.\n\nFamiliarity with AWS, Kubernetes, CI/CD systems, and cloud-native service architectures.\n\nExperience working with bug bounty programs or coordinating external security assessments.\n\nWhy Work with Us\nPhantom is built by a team of experienced product and engineering leaders working to make crypto-powered finance safer and easier to use. Our products serve a large and rapidly growing global community, which makes security engineering here both technically challenging and directly consequential.\n\nThis role offers the opportunity to:\n\nProtect products used by tens of millions of people.\n\nWork on security problems spanning mobile, browser, backend, cloud, and blockchain systems.\n\nShape product architecture early rather than reviewing security only at the end.\n\nBuild durable security capabilities while the company and product surface continue to grow.\n\nWork with engineers who care deeply about product quality, user experience, and security.\n\nBenefits\n\nCompetitive salary and equity\n\nEligibility to participate in the company’s performance bonus program\n\nComprehensive medical, dental, and vision insurance with 100% coverage\n\nStipend for your ideal remote setup\n\nFlexible hours and a supportive remote environment\n\nUnlimited vacation—take time when you need it\n\n401(k) retirement plan\n\nMonthly wellness benefit\n\nWeekly meal benefit\n\nGlobal off-sites\n\nThe target base salary for this role will range between $200,000 to $250,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer.\n\nWe strongly encourage candidates of all backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career.\n\nBy submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. (\"Phantom\") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws.","description_format":"text","description_chars":8482,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Smart Contracts & Security","Autonomous Driving","Automotive Software"],"lifecycle":[{"event":"open","at":"2026-10-23T12:26:26Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":1,"median_offered_wage_usd":185000,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":45,"reasons":["seen:1","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/phantom-staff-product-security-engineer-security-2","json_url":"https://alion.io/job/phantom-staff-product-security-engineer-security-2.json","meta":{"generated_at":"2026-10-24T16:19:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":2868,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":27037},"rest":"https://alion.io/mcp/rest/get_company?id=27037"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fphantom-staff-product-security-engineer-security-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fphantom-staff-product-security-engineer-security-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fphantom-staff-product-security-engineer-security-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/phantom-staff-product-security-engineer-security-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fphantom-staff-product-security-engineer-security-2"}]}