Security Engineer

Remotefull timeRemotemidH1B: no

Allium Security Engineer role at Allium focused on building a system of record for onchain finance. Address blockchain data fragmentation and complexity to provide reliable financial data.

Responsibilities

We're hiring a Security Engineer to build and operate the controls that protect Allium's infrastructure, applications, employee systems, and use of AI. You'll work closely with Engineering and the person leading our security program to investigate threats, implement practical fixes, and automate security work.
As AI agents gain access to code, data, and tools, security needs to cover both human and machine activity. You'll help secure how agents operate while strengthening our defenses against automated attacks, credential theft, and compromised software dependencies. This is a hands-on engineering role: you'll write code, test controls, investigate real signals, and take findings through remediation.
Secure cloud infrastructure and access. Implement least privilege, phishing-resistant authentication, short-lived credentials, controlled privileged access, and reliable provisioning and deprovisioning. Improve cloud configuration, managed credential storage, and network protections with service owners. Improve secrets scanning and prevent credentials from entering source control.
Secure AI agents and developer tools. Help implement permissions, execution isolation, network restrictions, and audit trails for coding assistants, agents, and tool integrations, including MCP. Test how untrusted content could trigger prompt injection, tool misuse, or unintended data access, and build safeguards at the point where actions execute.
Build detection and response. Correlate identity, cloud, workload, and CI/CD telemetry to detect credential theft, unusual access, unauthorized agent actions, suspicious software changes, and data exfiltration. Investigate attacks across systems, reduce alert noise, and test response procedures with system owners, including session revocation, exposed-credential rotation, and removal of unauthorized access.

Qualification

Typically 4+ years of relevant securityDepth in at least two relevant areasClear communicationDon't take our word for itTomasz Tungus from Theory VenturesBucky Moore from Kleiner PerkinsOk

Required

Typically 4+ years of relevant security, infrastructure, or software engineering experience, with direct responsibility for implementing security controls.
Hands-on experience with a major cloud platform and a strong foundation in identity, networking, operating systems, and access control.
Depth in at least two relevant areas, such as cloud security, detection and response, application security, vulnerability management, or corporate security.

Benefits

Dental
Vision
401(k)
PTO
Equity/RSU
Life Insurance

Company

Allium

View company page

Source: ashby

Active within the past hour

Remote-friendly