Senior Product Security Engineer
Core
Operate the Product Security program for Blockchain.com's internally-developed products across Consumer, OTC, and MRE lines, designing secure development lifecycles and protecting billions in transaction volume.
Role type
Senior Product Security Engineer (Application Security)
Builds
Blockchain.com consumer, OTC, and MRE products
Domain
Fintech / Cryptocurrency / Blockchain
Deliverable
production ML models | product features | infrastructure
Required skills
Application security engineering, threat modeling (STRIDE/attack trees), secure SDLC automation (SAST/SCA/DAST), code auditing (Java/Kotlin/TypeScript/Python), CI/CD security integration, vulnerability triage, incident response support, security metrics definition, stakeholder negotiation for remediation
Preferred skills
AI/LLM integration in security tooling, GRC framework experience, smart contract security, open-source security contributions, advanced security certifications (OSCP/OSWE/CISSP)
Technologies
CodeQL, GHAS, Snyk, SARIF, Kubernetes, DefectDojo, Dependabot
Responsibilities
Design and run the secure development lifecycle; lead threat modeling and architecture reviews; oversee Bug Bounty program triage; conduct deep-dive manual code reviews; negotiate security debt remediation; define application runtime signals and telemetry; build product-level test harnesses and fuzzing; coach junior engineers and security champions
Seniority
Senior, hands-on IC with mentorship responsibilities