Remote opportunity at
Allium | Data Driven Business SolutionsSecurity Engineer
Allium is seeking a Security Engineer to build and operate safeguards protecting its infrastructure, applications, internal systems, and AI integrations. Working directly alongside the engineering team…
Career Tools
About This Role
Allium is seeking a Security Engineer to build and operate safeguards protecting its infrastructure, applications, internal systems, and AI integrations. Working directly alongside the engineering team and the security program lead, this practitioner will address threats, put practical solutions in place, and automate security operations. As AI tools and coding assistants interact with sensitive code and data, the position requires securing both human and machine activities against automated threats, credential…
Job Description
Allium is seeking a Security Engineer to build and operate safeguards protecting its infrastructure, applications, internal systems, and AI integrations. Working directly alongside the engineering team and the security program lead, this practitioner will address threats, put practical solutions in place, and automate security operations. As AI tools and coding assistants interact with sensitive code and data, the position requires securing both human and machine activities against automated threats, credential theft, and vulnerable software dependencies.
This hands-on engineering role involves writing code, running control tests, analyzing active signals, and following issues through remediation. Core duties span cloud infrastructure security, developer tool safety, threat detection and response, software supply-chain risk mitigation, and enterprise compliance support. The ideal candidate brings a practical mindset, clear technical communication skills, and a strong foundation in cloud platforms, networking, and access control.
Allium builds the system of record for onchain finance by standardizing and verifying data across multiple blockchains to provide a neutral data layer for institutional clients, finance teams, and automated agents. The organization values deep obsession with craft, high agency, extreme ownership, and leading by example.
Responsibilities
- Secure cloud infrastructure and access by implementing least privilege, short-lived credentials, and phishing-resistant authentication.
- Enhance secrets scanning to keep credentials out of source control systems.
- Implement permissions, network restrictions, audit trails, and execution isolation for coding assistants, AI agents, and tools like MCP.
- Correlate identity, cloud, workload, and CI/CD telemetry to spot credential theft, data exfiltration, and unusual access patterns.
- Investigate potential attacks, lower alert noise, and execute incident response procedures such as session revocation and credential rotation.
- Evaluate dependencies, CI/CD pipelines, and third-party integrations to lower software supply-chain risk.
- Maintain visibility into internet-facing developer tools and management interfaces to patch or isolate vulnerabilities.
- Automate access reviews, configuration checks, and remediation tracking via code and APIs.
- Maintain endpoint protections, device security baselines, and SaaS identity controls alongside employee IT.
Requirements
- Approximately 4 or more years of relevant software, infrastructure, or security engineering experience with direct responsibility for security controls.
- Hands-on expertise using a major cloud platform.
- Strong foundation in operating systems, networking, access control, and identity management.
Qualifications
- Depth of knowledge in at least two focus areas such as cloud security, application security, vulnerability management, detection and response, or corporate security.
Core Skills
Benefits
- 100% medical, dental, vision, life, and AD&D insurance coverage for US Gold plans, with 80% coverage for dependents.
- Early-stage equity through a meaningful stock option grant for every full-time employee.
- Flexible, trust-based paid time off policy that meets or exceeds local statutory vacation requirements.
- Company-sponsored 401(k) retirement plan for US employees.
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the source posting indicates that the employment type is full-time and the remote status is remote.
What experience is required for this role?
The posting calls for approximately four or more years of relevant software, infrastructure, or security engineering experience, alongside hands-on cloud platform experience and a strong foundational grasp of networking, identity, operating systems, and access control.
What is the salary for this position?
The salary is not stated in the source posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.