Principal Security Engineer, Security
Description For Principal Security Engineer, Security
Circle is seeking a passionate Principal Security Engineer with expertise in Product and Blockchain Security to drive and implement technical strategies, innovative tooling, research, and processes. As part of the Security Engineering team, you'll work closely with Engineering, Infrastructure, and IT teams to support cloud operations, software development, and device/endpoint management.
In this role, you'll be responsible for ensuring the security of Circle's applications throughout the entire software development lifecycle. You'll conduct vulnerability assessments on web3 and web2 applications, automate security tests in CI/CD pipelines, and develop secure coding standards. Your expertise in blockchain technologies will be crucial as you research and incorporate security practices specific to this domain.
Key responsibilities include collaborating with product and engineering teams, conducting penetration tests, recommending security improvements, and serving as an escalation point for security alerts and incidents. You'll also manage external vendors for security projects and contribute to the continuous improvement of Circle's application security program.
The ideal candidate will have 7+ years of experience in cybersecurity, with at least 4 years leading security engineering projects. You should be well-versed in common attack techniques, penetration testing, and designing software security features. Experience with AWS, GCP, and blockchain platforms like Ethereum, Bitcoin, and Solana is essential. Knowledge of cryptography and experience with languages such as Solidity, Rust, Go, and Python is highly desirable.
At Circle, you'll be part of a company at the forefront of the emerging internet of money, working on groundbreaking technology that has the potential to enhance global economic prosperity and inclusion. You'll join a culture that values multistakeholder thinking, mindfulness, excellence, and high integrity. This role offers a competitive salary range of $200,000 - $257,500, along with benefits including medical insurance, equity, and a discretionary vacation policy.
If you're passionate about security in the blockchain and fintech space and want to make a significant impact on the future of digital finance, this role at Circle could be the perfect opportunity for you.
Responsibilities For Principal Security Engineer, Security
- Work with product management and software engineering teams during all phases of the SDLC to ensure applications are designed and implemented securely
- Test web3 and web2 applications and underlying systems for vulnerabilities using both tools and manual techniques
- Recommend code changes to eliminate vulnerabilities
- Automate security tests within the CI/CD pipeline
- Develop secure coding standards and training materials
- Research vulnerabilities specific to blockchain technologies
- Serve as an escalation point to investigate security alerts and identify incidents
- Investigate vulnerability reports related to Circle products and systems
- Manage vendors to conduct penetration tests and other security-related projects
- Influence the continuous improvement of the application security program
- Support other security team projects such as threat modeling, vulnerability scanning, and audits
Requirements For Principal Security Engineer, Security
- 7+ years of total experience in a cyber security role
- 4+ years of experience as a security engineer leading and driving projects
- Experience with common attack techniques and conducting penetration tests
- Experience designing software security features
- Experience automating security tests in CI/CD pipelines
- Experience working on applications deployed within AWS and GCP
- Experience working with Blockchains such as Ethereum, Bitcoin, Solana
- Working knowledge of public and private key cryptography
- Self-motivated and creative problem-solver
- Ability to work collaboratively across geographically distributed teams
- Bachelor's degree in computer science, computer engineering, cybersecurity or related field (or equivalent experience)
- Experience with Solidity, Rust, Go, Move, JSON, and Python is highly desirable
Benefits For Principal Security Engineer, Security
- Medical, dental, and vision insurance
- 401(k)
- Equity
- Discretionary vacation policy
- 10 days of paid sick leave per year
- 11 paid holidays per year in the U.S.
