Security Engineer

The role

You will build and operate controls to protect Allium's infrastructure, applications, employee systems, and use of AI. This hands-on engineering role involves writing code, testing controls, and investigating signals to remediate threats.

What you will do

• Secure cloud infrastructure and access using least privilege and phishing-resistant authentication
• Secure AI agents and developer tools through permissions, isolation, and audit trails
• Build detection and response by correlating identity, cloud, workload, and CI/CD telemetry
• Reduce software supply-chain risk by assessing dependencies and CI/CD workflows
• Move quickly on relevant threats by maintaining visibility into internet-facing services
• Automate and document security work using code and APIs
• Support employee security and enterprise assurance through endpoint protections and device security
• Provide technical evidence for audits and customer reviews

Required qualifications

• 4+ years of relevant security, infrastructure, or software engineering experience
• Direct responsibility for implementing security controls
• Hands-on experience with a major cloud platform
• Strong foundation in identity, networking, operating systems, and access control
• Depth in at least two areas such as cloud security, detection and response, application security, vulnerability management, or corporate security
• Experience investigating technical problems from logs and system behavior

Nice to have

• Bonus points for the right pronunciation of Allium

Benefits

• Medical, Dental, Vision, Life and AD&D insurance
• US folks get 100% coverage for Gold plans, 80% for dependents
• Meaningful early-stage equity
• Stock option grant for every full-time employee
• Flexible, trust-based paid time off
• Policies meet or exceed local statutory vacation requirements
• Company sponsored 401(k) plan in US

Before you apply

• All applicants have to answer this pop quiz: 'What is an Allium? What is your favorite Allium?'

About the company

Allium is building the system of record for onchain finance by ingesting, verifying, and standardizing data across 140+ blockchains. It provides a neutral, canonical data layer for finance, accounting, risk, and engineering teams.