# Security Engineer

**Company:** [Ether.Fi](https://hotfix.jobs/companies/ether-fi)
**Location:** Denver, CO, New York, NY
**Role:** Security Engineering
**Experience:** 5+ years
**Skills:** CI/CD, GitHub Actions, CircleCI, AWS, GCP, Crowdstrike, Edr, Identity And Access Management, SAST, DAST, Threat Modeling, Vulnerability Management, Incident Response, Immunefi
**Posted:** 2026-09-02

> Hands-on security engineer responsible for security operations, bug bounty and vulnerability management, DevSecOps pipeline hardening, cloud security, and identity management. Requires 5+ years of software and security engineering experience and strong coding fundamentals.

## Job Description

## Responsibilities

### Security Operations
- Own day-to-day security operations, including monitoring, alerting, triage, and incident response.
- Manage endpoint security through an EDR system; tune detections, investigate alerts, and drive incidents to resolution.
- Lead identity lifecycle management, including onboarding, offboarding, access provisioning, key rotation, and deprovisioning.

### Bug Bounty and Vulnerability Management
- Own the ImmuneFi program by triaging, reproducing, and responding to submissions.
- Prioritize and track vulnerabilities through remediation with protocol and engineering teams.
- Develop internal tooling and processes to improve the speed and consistency of bounty workflows.

### DevSecOps and Pipeline Hardening
- Audit and harden CI/CD pipelines, including secrets management, supply-chain integrity, SAST/DAST integration, and build provenance.
- Identify and remediate vulnerable dependencies across repositories.
- Establish and enforce security standards across the software development lifecycle.

### Infrastructure Security
- Review and harden cloud environments, including access controls, network segmentation, least privilege, and logging.
- Contribute to threat modeling for new systems and architectural changes.
- Drive implementation of security tooling across the technology stack.

### Vendor Management
- Manage relationships with external security vendors and service providers, including SLAs, scope, and remediation follow-through.
- Evaluate and onboard security tools as the team and threat landscape evolve.

## Requirements
- 5–8+ years of experience in software and security engineering, including meaningful DevSecOps or security operations experience.
- Strong software engineering fundamentals and the ability to write production code.
- Hands-on experience hardening CI/CD pipelines using GitHub Actions, CircleCI, or similar tools.
- Experience securing cloud infrastructure such as AWS, GCP, or equivalent platforms.
- Proficiency with endpoint security tooling such as CrowdStrike or an equivalent EDR.
- Experience owning identity and access management processes, including onboarding and offboarding workflows.
- Strong written and verbal communication skills, including triage reporting, developer feedback, and explaining risk to non-technical stakeholders.

## Nice to Have
- Prior experience as a software engineer before specializing in security.
- Experience at a DeFi protocol, cryptocurrency exchange, or blockchain infrastructure company.
- CTF or security competition experience.
- Contributions to open-source security tooling.

## Similar jobs

- [Security Engineer, Threat Intelligence](https://hotfix.jobs/jobs/a9d333c0-2242-416f-a470-d3a19f982046) - Fluidstack - New York, NY - $220k – $280k/yr
- [Security Scientist](https://hotfix.jobs/jobs/36a4a0c9-f833-41fb-bd29-ad40c4d5050f) - Figma - Remote - $140k – $348k/yr
- [Security Engineer](https://hotfix.jobs/jobs/061a2617-4d6a-4cf3-96a0-ad832100d55f) - hud - San Francisco, CA
- [Abuse Research Engineer](https://hotfix.jobs/jobs/2f1effd6-b955-48c7-9d30-3d0aed220264) - Stripe - Remote
- [Security Engineer, Offensive Security](https://hotfix.jobs/jobs/e5c4fc22-2c3a-4334-8eae-e8ab5bcf2a8a) - Anthropic - San Francisco, CA - $300k – $320k/yr

**Apply:** https://hotfix.jobs/jobs/95052c50-bbb9-4208-a07c-825d0e46db6c
**Canonical:** https://hotfix.jobs/jobs/95052c50-bbb9-4208-a07c-825d0e46db6c