Anchorage Digital
Member of Technical Staff, Security
United States · Remote · Staff · Full-time · Posted Dec 4, 2024
- Experience
- 3+ years of hands-on experience in security engineering, application security, penetration testing, or security.
About the job
Build and operate security tooling and workflows, assess vulnerabilities, respond to security events, and help engineering teams embed security across Anchorage Digital’s applications and infrastructure.
What you'll do
- Develop security automation, tooling, and guardrails; conduct security assessments, penetration tests, and code reviews.
- Manage vulnerability remediation and lead investigation and containment of security events.
- Partner with Engineering, Infrastructure, and Compliance; support audits with assurance evidence and communicate remediation guidance.
What they ask for
- 3+ years of hands-on experience in security engineering, application security, penetration testing, or security.
- Experience building or maintaining security tools, integrations, or automation using Python, Go, or similar languages.
- Ability to assess vulnerabilities in applications, APIs, and cloud infrastructure and communicate remediation strategies.
- Experience with static and dynamic analysis tools, AWS security fundamentals, and security-event investigation and response.
Nice to have
- Experience with bug bounty programs, regulated financial services, fintech, or crypto environments; exposure to blockchain security, smart contract auditing, or Web3.
- Open-source security tool contributions or relevant certifications such as OSCP, GWAPT, GCIH, or AWS Security Specialty.
Tools
Python, Go, Semgrep, CodeQL, Burp Suite, AWS, HackerOne, Bugcrowd
Model-written summary · the original posting is authoritative