Infrastructure Security Engineer

Blockchain is connecting the world to the future of finance. As a Senior Infrastructure Security Engineer, you will play a critical role in building and providing tooling that monitors the entire stack, from consumer-facing products and institutional offerings to ensuring rapid response to cyber attacks on colleagues and endpoints. You will lead by example and drive technical discussions with engineering teams to influence the overall architecture of the platform.

What you'll do

• Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments.
• Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them.
• Collaborate with the SRE and engineering teams to integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures.
• Build automated tooling and services to enforce secure configurations, detect misconfigurations, and support continuous compliance.
• Assist in threat modeling, design reviews, and architectural assessments for new and existing systems.
• Contribute to internal security documentation, best practices, and developer guidance.
• Participate in security incident response when engineering expertise or automation support is needed.
• Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into secure infrastructure.

What you bring

• 4+ years of experience in security engineering, platform security, or DevSecOps roles.
• Hands-on experience implementing security controls and automation within cloud environments, with GCP or AWS preferred.
• Proficiency in modern scripting, automation, and infrastructure as code such as Python, Bash, Go, Terraform, or similar.
• The ability to collaborate closely with engineering teams and translate security requirements into practical, scalable solutions.
• Strong analytical and problem-solving skills, with a bias toward automation over manual workflows.
• Curiosity, ownership, and a drive to continuously improve the security posture of complex systems.
• Familiarity with at least one of the following: Cloudflare (DDoS protection, WAF), OSS SIEM tools (Splunk, Elastic, etc), or incident management platforms (e.g. Incident.io, PagerDuty).
• Familiarity with at least one CI/CD system such as Github Actions, Concourse, or CircleCI.
• Familiarity with maintaining HIDS systems, with Wazuh preferred.

Nice to have

• Knowledge of security standards and governance frameworks such as CIS Benchmarks, NIST, SOC2, ISO 27001, or PCI DSS, and how to operationalize them.
• Hands-on experience building and maintaining a SIEM comprised of open-source and hosted components.
• Experience securing consumer-facing web and iOS/Android applications.
• Experience designing policies and administering Vault and other Hashicorp products.
• Experience managing security vendors.

What we offer

• Unlimited vacation policy.
• Unlimited books policy to order technical resources you need.
• Apple equipment.
• Full-time salary based on experience and meaningful equity in an industry-leading company.
• Role based in the Paris office with mandatory in-office presence four days per week.
• Work from Anywhere Policy allowing remote work from anywhere in the world for up to 20 days per year.

About Blockchain

Blockchain is the most trusted and fastest-growing global crypto company, helping millions of people worldwide safely access cryptocurrency. Since 2011, it has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.