Staff Security Engineer, Paxos

• At Least 5 years working with AWS and securing large production workloads (multi-account, multi-region with hundreds of nodes)
• In-depth knowledge of security layers both native to AWS (IAM, ACM, security groups, ACLs, etc.) and general (secrets storage with tools like HashiCorp Vault, mTLS, service meshes)
• Participation in both offensive and defensive security activities
• SOC automation and automated detection and response
• At least 5 yrs experience in leading incident response in a hybrid SOC environment
• In-depth experience in implementing and operating a SEIM, preferably Splunk
• Experience integrating vulnerability scanning and assessment tools into SOC operations to identify and remediate security weaknesses

• This is the founding hire of a new team who will lay the groundwork for our internal security operations program, including alerting, monitoring, vulnerability analysis, interfacing with engineering teams, and external SOC
• They are the first line of defense securing billions of assets
• Be the founding hands-on member to a new team, helping to mature our Security Operations program
• Working with talented engineers, you will help create best practices, runbooks, interface with our SOC, and build the roadmap for the SecOps function
• Be a technical lead to a small group of engineers building out logging and alerting pipelines, runbooks, automation, and more!
• Identify and remediate security issues and vulnerabilities in our cloud infrastructure, determining root cause, and identifying prevention methods
• Lead security incident response and serve as the primary incident commander
• Work with a wide variety of engineering teams – Cloud Security, Application Security, IT, Production Engineering, Developer Experience, etc
• Opportunities to move into a people manager role as the function grows
• Immerse yourself in blockchain technology, cryptocurrency for enterprises and investors, our regulation-first approach, and more!

Total funding: $535.3m

Paxos is aiming to revolutionize blockchain by developing its selection of regulation-compliant infrastructure services for companies looking to add features like crypto brokerages or branded stablecoins to their customer offerings.