Infrastructure Security Engineer

As a Senior Infrastructure Security Engineer at Blockchain, you will design and build security controls, automation, and processes that protect a global crypto platform trusted by over 90 million wallet holders. You'll play a critical role in monitoring the entire stack across consumer-facing products and institutional offerings, while leading technical discussions with engineering teams to influence the overall architecture of the platform.

What you'll do

• Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments.
• Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them.
• Collaborate with the SRE and engineering teams to integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures.
• Build automated tooling and services to enforce secure configurations, detect misconfigurations, and support continuous compliance.
• Assist in threat modeling, design reviews, and architectural assessments for new and existing systems.
• Contribute to internal security documentation, best practices, and developer guidance.
• Participate in security incident response when engineering expertise or automation support is needed.
• Research, architect, and safely embed cutting-edge AI utilities and Large Language Model agents into secure infrastructure.

What you bring

• 4+ years of experience in security engineering, platform security, or DevSecOps roles.
• Hands-on experience implementing security controls and automation within cloud environments, with GCP or AWS preferred.
• Proficiency in modern scripting, automation, and infrastructure as code such as Python, Bash, Go, or Terraform.
• Ability to collaborate closely with engineering teams and translate security requirements into practical, scalable solutions.
• Strong analytical and problem-solving skills, with a bias toward automation over manual workflows.
• Curiosity, ownership, and a drive to continuously improve the security posture of complex systems.
• Familiarity with Cloudflare for DDoS protection and WAF, open-source SIEM tools such as Splunk or Elastic, and incident management platforms such as Incident.io or PagerDuty.
• Familiarity with at least one CI/CD system such as Github Actions, Concourse, or CircleCI.
• Familiarity with maintaining HIDS systems, preferably Wazuh.

Nice to have

• Knowledge of security standards and governance frameworks such as CIS Benchmarks, NIST, SOC2, ISO 27001, or PCI DSS, and how to operationalize them.
• Hands-on experience building and maintaining a SIEM comprised of open-source and hosted components.
• Experience securing consumer-facing web and iOS or Android applications.
• Experience designing policies and administering Vault and other Hashicorp products.
• Experience managing security vendors.

What we offer

• Full-time salary based on experience, plus meaningful equity in an industry-leading company.
• London office-based role with mandatory in-office presence four days per week.
• Work from Anywhere Policy: up to 20 days per year of remote work from anywhere in the world.
• Unlimited vacation policy.
• Apple equipment.
• ClassPass membership.
• Flexible work culture.

About Blockchain

Blockchain is a global crypto company trusted by over 90 million wallet holders and 40 million verified users, facilitating over $1 trillion in crypto transactions since 2011. The company builds financial infrastructure to help millions of people safely access cryptocurrency worldwide.