Infrastructure Security Engineer

As a Senior Infrastructure Security Engineer at Blockchain.com, you will play a critical role in building and providing tooling that monitors the entire stack, from consumer-facing products to institutional offerings, and ensure rapid response to cyber attacks. You will lead by example, drive technical discussions with engineering teams, and influence the overall architecture of the platform through proactive threat identification and in-depth investigation of security issues.

What you'll do

• Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments.
• Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them.
• Collaborate with the SRE and engineering teams to integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures.
• Build automated tooling and services to enforce secure configurations, detect misconfigurations, and support continuous compliance.
• Assist in threat modeling, design reviews, and architectural assessments for new and existing systems.
• Contribute to internal security documentation, best practices, and developer guidance.
• Participate in security incident response when engineering expertise or automation support is needed.
• Research, architect, and safely embed cutting-edge AI utilities and Large Language Model agents directly into secure infrastructure.

What you bring

• 4+ years of experience in security engineering, platform security, or DevSecOps roles.
• Hands-on experience implementing security controls and automation within cloud environments, with GCP or AWS preferred.
• Proficiency in modern scripting, automation, and infrastructure as code such as Python, Bash, Go, Terraform, or similar.
• Ability to collaborate closely with engineering teams and translate security requirements into practical, scalable solutions.
• Strong analytical and problem-solving skills, with a bias toward automation over manual workflows.
• Curiosity, ownership, and a drive to continuously improve the security posture of complex systems.
• Familiarity with some of the following: Cloudflare for DDoS protection and WAF, OSS SIEM tools such as Splunk or Elastic, incident management platforms such as Incident.io or PagerDuty.
• Familiarity with at least one CI/CD system such as GitHub Actions, Concourse, or CircleCI.
• Familiarity with maintaining HIDS systems, with Wazuh preferred.

Nice to have

• Knowledge of security standards and governance frameworks such as CIS Benchmarks, NIST, SOC2, ISO 27001, and PCI DSS, and how to operationalize them.
• Hands-on experience building and maintaining a SIEM comprised of open-source and hosted components.
• Experience securing consumer-facing web and iOS or Android applications.
• Experience designing policies and administering Vault and other Hashicorp products.
• Experience managing security vendors.

What we offer

• Unlimited vacation policy.
• Unlimited books policy to order technical resources you need.
• Apple equipment.
• Full-time salary based on experience and meaningful equity in the company.
• Role based in the Paris office with mandatory in-office presence four days per week.
• Work from Anywhere Policy: work remotely from anywhere in the world for up to 20 days per year.

About Blockchain.com

Blockchain.com is a global crypto company that helps millions of people safely access cryptocurrency. Since 2011, it has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.