{"id":665227,"url":"https://alion.io/job/projecteleven-senior-security-engineer","title":"Senior Security Engineer","company":{"id":685549,"name":"Project Eleven","domain":"projecteleven.com","url":"https://alion.io/company/projecteleven","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":83000,"max_usd":147000,"period":"year","method":"role_seniority_country_cell","sample_n":42},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Red Teaming","optional":false},{"name":"Sigstore","optional":false},{"name":"SLSA","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-05-20T12:56:34Z","employer_posted_date":"2026-05-20","last_verified_at":"2026-10-30T06:31:20Z","board_verified":true,"closed_at":null,"days_open":162,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":161},"description":"About Project Eleven\nProject Eleven is an applied lab of builders and technologists working at the intersection of quantum computing and cryptography. We build impactful solutions that push the digital-asset ecosystem to a more secure future. Our focus is post-quantum migration: upgrading wallets, identity, and settlement rails to quantum-safe primitives without breaking UX, composability, and developer workflows.\nOur mission is to future-proof digital assets and preserve self-sovereignty in a post-quantum world. We do that by building the canonical tooling and products teams can adopt: crypto-agile infrastructure, reference implementations, and integrations that fit real constraints like latency, cost, compatibility, key rotation, and recovery.\nWe work with leading ecosystems to make this migration real through products we build, audits, testnets, and cutting edge research. The vision we are have is clear: a proven upgrade path, production-ready tooling and users retaining control of their assets and identity, before CRQC exists.\nThe role\nWe're hiring a Senior Security Engineer to own the security engineering of our institutional product and platform. This is a hands-on, build-it-yourself role: you'll threat model our systems, design and implement secure architecture, harden our AWS infrastructure, own security of key management (including HSMs and TEEs), secure our supply chain and build pipeline, and run incident response. You'll work directly in our codebase and infrastructure alongside engineering with security as a key focus.\nThis role is a full-time, fully remote position in Europe (GMT to GMT+2).\nWhat you'll be responsible for\nThreat modelling & secure architecture: lead threat modelling for new and existing systems, and shape the architecture of our institutional product so security is designed in, not bolted on\n\nApplication security: build out our AppSec program: secure code review, secure SDLC, dependency and vulnerability scanning, security testing in CI\n\nInfrastructure hardening & AWS security: harden our cloud infrastructure and deployment pipeline; own AWS security posture (IAM, network segmentation, secrets, logging/detection)\n\nKey management, HSMs & TEEs: design, develop, and operate our key management architecture, including HSM-backed signing and TEE-based isolation for sensitive operations\n\nReproducible builds & supply chain security: implement reproducible/verifiable builds and harden our software supply chain (dependency provenance, build integrity, artifact signing)\n\nSecurity reviews: review designs, code, and cryptographic protocols/integrations across our backend systems, partnering closely with engineering rather than gating them\n\nIncident response: build and run our incident response capability: runbooks, on-call rotation, postmortem culture\n\nCompliance support: collaborate with the team driving our compliance program (SOC 2 Type II as the first milestone), owning the technical controls and evidence without owning the program itself\n\nWhat you bring\n5+ years in security engineering with hands-on ownership of building and securing production systems\n\nStrong software engineering ability. You can read, write, and review production code and infrastructure-as-code, not just point out issues in it\n\nStrong applied cryptography knowledge: key management, signing protocols, secure key handling at rest and in use\n\nHands-on experience hardening cloud infrastructure (AWS) and modern deployment platforms\n\nReal threat modelling experience and the ability to make pragmatic risk tradeoffs in a fast-moving startup environment\n\nExperience with secure architecture and design review for distributed or backend systems\n\nStrong English communication, including the ability to explain security engineering clearly to engineers, customers, and auditors\n\nWhat we'd love to see\nDirect experience with HSMs, TEEs (SGX/SEV/TrustZone/Nitro), and/or MPC/threshold signing in production\n\nExperience implementing reproducible builds or software supply chain security (SLSA, sigstore, artifact provenance)\n\nBackground in institutional digital-asset infrastructure: custody platforms, exchanges, HSM-backed systems, or regulated financial infrastructure\n\nFamiliarity with post-quantum cryptography and the operational implications of migrating cryptographic primitives\n\nExperience running incident response for a security-critical product\n\nPrior experience as the first security engineer at a startup, or building a security function from scratch\n\nOffensive security background (red team, pentesting, vulnerability research) as a complement to defensive work\n\nOpen-source contributions to security tooling, cryptography, or related infrastructure\n\nExposure to SOC 2, ISO 27001, or equivalent compliance frameworks (nice to have, not the core of the role)\n\nEqual Opportunity\nWe are committed to equal employment opportunity and believe that diverse teams build better products. All qualified applicants will receive consideration without regard to any protected characteristic under applicable law.","description_format":"text","description_chars":5056,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain Infrastructure","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-10T21:53:26Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.262,"p_room":0.28,"age_days":162,"expected_fill_days":29,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/projecteleven-senior-security-engineer","json_url":"https://alion.io/job/projecteleven-senior-security-engineer.json","meta":{"generated_at":"2026-10-30T07:13:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10248,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685549},"rest":"https://alion.io/mcp/rest/get_company?id=685549"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprojecteleven-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprojecteleven-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprojecteleven-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/projecteleven-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprojecteleven-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":665227}},{"tool":"search_jobs","arguments":{"company":"projecteleven.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":665227},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}