Security Engineer

As a Security Engineer at Allium, you'll build and operate the controls that protect Allium's infrastructure, applications, employee systems, and use of AI. You'll work closely with Engineering and the person leading the security program to investigate threats, implement practical fixes, and automate security work. As AI agents gain access to code, data, and tools, you'll help secure how agents operate while strengthening defenses against automated attacks, credential theft, and compromised software dependencies. This is a hands-on engineering role: you'll write code, test controls, investigate real signals, and take findings through remediation.

What you'll do

• Secure cloud infrastructure and access by implementing least privilege, phishing-resistant authentication, short-lived credentials, controlled privileged access, and reliable provisioning and deprovisioning. Improve cloud configuration, managed credential storage, and network protections with service owners, and enhance secrets scanning to prevent credentials from entering source control.
• Secure AI agents and developer tools by helping implement permissions, execution isolation, network restrictions, and audit trails for coding assistants, agents, and tool integrations including MCP. Test how untrusted content could trigger prompt injection, tool misuse, or unintended data access, and build safeguards at the point where actions execute.
• Build detection and response by correlating identity, cloud, workload, and CI/CD telemetry to detect credential theft, unusual access, unauthorized agent actions, suspicious software changes, and data exfiltration. Investigate attacks across systems, reduce alert noise, and test response procedures with system owners including session revocation, exposed-credential rotation, and removal of unauthorized access.
• Reduce software supply-chain risk by assessing dependencies, CI/CD workflows, third-party integrations, and developer environments. Partner with engineers to validate findings, protect build and deployment credentials, and remediate vulnerabilities.
• Move quickly on relevant threats by maintaining visibility into internet-facing services including developer tools and management interfaces. Evaluate new vulnerabilities and active exploitation against actual exposure, and help patch, isolate, revoke credentials, or apply compensating controls with service owners, then verify that the response worked.
• Automate and document by using code and APIs to improve access reviews, configuration checks, evidence collection, and remediation tracking. Use AI thoughtfully for security work, validating its output and protecting sensitive data.
• Support employee security and enterprise assurance by deploying, validating, and maintaining endpoint protections and device security baselines including prevention settings, tamper protection, encryption, and timely updates. Work with the owner of employee IT on identity and SaaS controls, provide clear technical evidence for audits and customer reviews, and maintain useful runbooks.

What you bring

• Typically 4+ years of relevant security, infrastructure, or software engineering experience, with direct responsibility for implementing security controls.
• Hands-on experience with a major cloud platform and a strong foundation in identity, networking, operating systems, and access control.
• Depth in at least two relevant areas such as cloud security, detection and response, application security, vulnerability management, or corporate security.
• Experience investigating technical problems from logs and system behavior, testing hypotheses, and following issues through to resolution.
• Clear communication, practical judgment, and constructive working relationships with engineers and business teams.

What we offer

• Medical, dental, vision, life and AD&D insurance: US-based employees receive 100% coverage for Gold plans and 80% for dependents.
• Meaningful early-stage equity so you can share directly in Allium's upside.
• Flexible, trust-based paid time off. Policies meet or exceed local statutory vacation requirements in every country where we hire.
• Company-sponsored 401(k) plan in the US for pre-tax retirement savings.

About Allium

Allium ingests, verifies, and standardizes data across 140+ blockchains and 30+ petabytes of history to build the system of record for onchain finance. The company closes structural gaps that prevent blockchains from becoming systems of record: translating raw events into financial concepts, mapping thousands of protocols into a canonical cross-chain schema, providing read-optimized globally distributed data at web scale, and delivering auditable methodology with SOC 1 and 2 compliance. Allium powers finance, accounting, and risk teams; engineers and product teams; and strategy, research, and executive teams at customers including Visa, Stripe, G-SIB banks, Big 4 accounting firms, Coinbase, Phantom, and Uniswap.