Infrastructure Security Engineer

As a Senior Infrastructure Security Engineer at Blockchain.com, you will build and provide tooling that monitors the entire stack, from consumer-facing products and institutional offerings to endpoint security. You play a critical role in ensuring rapid response to cyber attacks and will lead by example, driving technical discussions with engineering teams and influencing the overall architecture of the platform.

What you'll do

• Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments.
• Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them.
• Collaborate with the SRE and engineering teams to integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures.
• Build automated tooling and services to enforce secure configurations, detect misconfigurations, and support continuous compliance.
• Assist in threat modeling, design reviews, and architectural assessments for new and existing systems.
• Contribute to internal security documentation, best practices, and developer guidance.
• Participate in security incident response when engineering expertise or automation support is needed.
• Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into the secure infrastructure.

What you bring

• 4+ years of experience in security engineering, platform security, or DevSecOps roles.
• Hands-on experience implementing security controls and automation within cloud environments, with GCP or AWS preferred.
• Proficiency in modern scripting, automation and infrastructure as code tools such as Python, Bash, Go, Terraform, or similar.
• Ability to collaborate closely with engineering teams and translate security requirements into practical, scalable solutions.
• Strong analytical and problem-solving skills, with a bias toward automation over manual workflows.
• Curiosity, ownership, and a drive to continuously improve the security posture of complex systems.
• Familiarity with some of the following: Cloudflare (DDoS protection, WAF), open-source SIEM tools (Splunk, Elastic, etc), incident management platforms (e.g. Incident.io, PagerDuty).
• Familiarity with at least one CI/CD system (Github Actions, Concourse, CircleCI).
• Familiarity with maintaining HIDS systems, with Wazuh preferred.

Nice to have

• Knowledge of security standards and governance frameworks such as CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS, and how to operationalize them.
• Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted components.
• Experience securing consumer-facing web and iOS or Android applications.
• Experience designing policies and administering Vault and other Hashicorp products.
• Experience managing security vendors.

What we offer

• Unlimited vacation policy.
• Unlimited books policy for technical resources.
• Apple equipment.
• Full-time salary based on experience and meaningful equity in the company.
• Role based in the Paris office with mandatory in-office presence four days per week.
• Work from Anywhere Policy: you can work remotely from anywhere in the world for up to 20 days per year.

About Blockchain.com

Blockchain.com is a leading global crypto company that helps millions of people safely access cryptocurrency. Since 2011, it has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.