Cybersecurity Engineer

The role

You will build, implement, and maintain security capabilities across technology platforms. This includes implementing security controls, automating processes, and integrating security throughout the software development lifecycle across cloud infrastructure, enterprise applications, AI-enabled systems, and modern engineering platforms.

What you will do

• Partner with engineering teams to implement security controls and secure design patterns
• Build and operationalize security controls for identity, data protection, network security, logging, monitoring, and auditability
• Participate in threat modeling, architecture reviews, and security assessments
• Implement and maintain security controls for cloud platforms, APIs, developer tooling, and third-party technologies
• Build monitoring, detection, alerting, and incident response capabilities
• Integrate security tooling and automation into CI/CD pipelines and cloud-native engineering workflows
• Support secure software development by partnering with engineering teams to embed security throughout the SSDLC
• Assess and mitigate technical and operational risks associated with cloud platforms, enterprise applications, AI-enabled systems, and third-party providers
• Partner with compliance, audit, and business stakeholders to ensure technology solutions meet regulatory, control, and governance requirements
• Contribute to the development of security standards, engineering patterns, automation, and operational best practices

Required qualifications

• 8+ years of experience in cybersecurity, security engineering, cloud security, application security, DevSecOps, or a related engineering discipline
• Experience implementing security controls within cloud-native environments
• Strong understanding of security fundamentals including identity and access management, data protection, network security, vulnerability management, monitoring, and incident response
• Experience integrating security into software development workflows, including CI/CD pipelines and Secure Software Development Lifecycle (SSDLC) practices
• Strong programming and scripting capabilities (e.g., Python, Terraform, Infrastructure-as-Code)
• Experience with cloud infrastructure, Kubernetes, APIs, and modern application architectures
• Experience with security tooling such as SIEM/SOAR, vulnerability management, cloud security, endpoint security, application security, or detection engineering platforms
• Experience conducting threat modeling, security assessments, and architecture reviews for modern applications and cloud platforms
• Experience operating in regulated environments with strong control, audit, and compliance requirements
• Strong communication skills

Nice to have

• AWS
• Familiarity with AI/ML systems, including LLMs and AI-enabled application architectures
• Experience within financial services

Benefits

• Medical, Dental and Vision
• 401(k)-retirement plan with company match
• Generous PTO policy
• Flexible work environment with remote weeks
• Fertility and family planning benefits
• Health allowances
• Commuter reimbursement

About the company

Grayscale is the largest digital asset-focused investment platform in the world by AUM and offers the broadest selection of digital asset investment products in the U.S. based on number of products.