Infrastructure Security Engineer

About the role

Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.

We are looking for a Senior Security Engineer, Infrastructure & Reliability to lead by example and drive technical discussions across engineering teams. In this hands-on hybrid role, you will build scalable security guardrails and automation across cloud, CI/CD, and developer platforms—combining SRE and security disciplines to protect our global stack and support proactive threat defense.

Our day-to-day work is interesting and dynamic, driven by a focus on proactive threat actor identification and in-depth investigation of security issues. These practices are key to ensuring strong product security and fostering continuous, iterative improvement.

WHAT YOU WILL DO:

- Design, implement, and automate security controls across GCP and our wider infrastructure, focusing on least-privilege access and leveraging Terraform, policy-as-code, and CI/CD pipelines to prevent misconfigurations, detect configuration drift, and continuously enforce security baselines.

- Partner closely with SRE teams to establish cloud-native deployment workflows, enforcing explicit CI/CD gates, approval flows, artifact provenance, and build security.

- Partner with SRE to harden and manage the security posture of global networking infrastructure, corporate VPN, and perimeter tooling (e.g., Cloudflare) to prevent unauthorized exposure.

- Design and deploy internal tooling to support the SOC and Security Engineering teams.

- Conduct threat modeling, design reviews, and architectural assessments for new and existing systems.

- Maintain internal security documentation, standard operating procedures, and developer best-practice guidance.

- Provide specialized infrastructure, cloud, automation, and CI/CD support during incident response operations and threat investigations.

WHAT YOU WILL NEED:

- 4+ years of experience in Security Engineering, Platform Security or SRE/DevOps, with demonstrated ownership of security controls in production environments.

- Ability to assess infrastructure security risks, conduct threat modeling and security design reviews, and translate findings into practical, scalable engineering controls.

- Hands-on experience implementing security controls and automation in cloud environments (GCP preferred).

- Experience designing secure CI systems and workflows, dealing with artifact provenance, approval flows, and code protection (GitHub Actions preferred).

- Solid understanding of network-level security protocol concepts and mitigations (TLS, HTTPS, network segmentation).