Product security jobs in crypto and blockchain companies

Cribl does differently.  What does that mean? It means we are a serious company that doesn’t take itself too seriously; and we’re looking for people who love to get stuff done, and laugh a bit along the way. We’re growing rapidly - looking for collaborative, curious, and motivated team members who are passionate about putting customers first. As a remote-first company we believe in empowering our employees to do their best work, wherever they are.  As the data engine for IT and Security many of the biggest names in the most demanding industries trust Cribl to solve their most pressing data needs. Ready to do the best work of your career? Join the herd and unlock your opportunity.Why you’ll love this role: Cribl Inc is looking for a Product Security Engineer with an AWS security background to join our mission to unlock the value of all machine data. Cribl provides users a new level of observability, intelligence and control over their real-time data. You will join a team of security engineers who are committed to shipping secure software and enjoying all the goat gifs the internet has to offer. This role is remote and you will report into the engineering organization where you will be responsible for both identifying security risks as well as ensuring mitigation across all Cribl products in the Cloud and on premise. The Product Security Engineers in this role will engage with development and operations teams across the Cribl products to enable and drive them to follow secure development best practices, making sure security is built into every product we ship. Our software is deployed in some of the largest organizations in the world processing 100s of TB to PB of IT & Security data.   As An Active Member Of Our Team, You Will... Evaluate results from Cribl’s Cloud Security Posture Management (CSPM), perform root cause analysis on AWS misconfigurations, and educate engineering teams on secure AWS patterns Perform application security assessments including AWS architecture review, threat modeling, secure code review, and general security consulting.  Assist and enable product teams to follow secure development practices, while also empowering them to own security within their product area.  Have a proven development background and can communicate with engineering teams with authority, credibility, and empathy. Product Security is complex and context-specific and, as such, will require you to learn constantly and be committed to continuous innovation, because what worked yesterday may not work tomorrow. Consult with development and operations teams to provide guidance and recommend secure design patterns Perform security assessments on new and existing products and services to identify security risks and establish baseline security requirements Establish and drive security standards across Cribl to improve security and resiliency of software and systems architecture   If You Got It, We Want It Experience in software development or product security engineering, with additional full-time product or information security experience Proven experience performing security design reviews for complex applications, including distributed systems, APIs, and services deployed to cloud, on-premise, and hybrid environments Expert knowledge and implementation experience across information security disciplines, including web application, network, and operating systems security Fluency with the OWASP Top 10 and other common vulnerabilities and exploit techniques, and ability to define appropriate countermeasures Deep understanding of common application and network protocols, cryptographic technologies, and authentication and authorization protocols Knowledge of compliance requirements for industry-standard certifications like PCI DSS, SOC2, HIPAA, FedRAMP Direct experience supporting cloud operational models, including SaaS security architecture, microservices, containers, and/or Kubernetes BA/BS in computer science, a related discipline, or equivalent work experience   Preferred Qualifications Contributions to the security community: research papers, public CVEs, conference talks, open source, etc. Extensive automation and development experience in programming languages such as: C++, JavaScript/TypeScript, Python, Go Familiarity with “big data” and distributed systems technology OSCP or related security credentials   #LI-MV1 #LI-Remote  Bring Your Whole SelfDiversity drives innovation, enables better decisions to support our customers, and inspires change for the better. We’re building a culture where differences are valued and welcomed, and we work together to bring out the best in each other. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or any other applicable legally protected characteristics in the location in which the candidate is applying. Interested in joining the Cribl herd? Learn more about the smartest, funniest, most passionate goats you’ll ever meet at cribl.io/about-us. 

The InfoSec team at Chainalysis is focused on maintaining the security and integrity of our solutions. We collaborate with various teams to integrate secure practices into our development processes, build and manage security tools and dashboards, and oversee the security operations and deployment across our products and infrastructure.The Product Security Engineer at Chainalysis is dedicated to maintaining and enhancing the security of our products.. This role involves collaborating with developers to embed security into every stage of the product lifecycle, building custom security tools, automating assessments, and ensuring a robust security posture within our CI/CD pipelines. The Product Security Engineer also leads proactive efforts in vulnerability management, penetration testing, and security reviews to safeguard our products and continuously enhance our security practicesIn this role, you’ll: Conduct penetration testing and security assessments to identify vulnerabilities and ensure robust security measures.Develop and maintain custom security tools and scripts to automate and enhance security processes.Collaborate with development teams to integrate secure coding practices and solutions into both front-end and back-end systems.Review and improve security within CI/CD pipelines, integrating tools like SonarCloud and Wiz for continuous security assurance.Perform security audits and code reviews, offering guidance through pull requests and collaborative sessions.Analyze and address security issues by providing expert advice and actionable solutions to maintain the integrity of applications.We’re looking for candidates who have: Hands-on experience in penetration testing and security assessments, with a strong ability to identify and mitigate vulnerabilities.Excellent communication skills, both verbal and written, for effective collaboration with cross-functional teams.Proficiency with security tools like Burp Suite, Sonarcloud, Jfrog, and Wiz, and the capability to create custom scripts using Python to enhance automation.Proficient coding skills with a focus on security, particularly in Java and/or JavaScript. Alternative languages include Python and Go.Extensive knowledge of cloud security practices, specifically on platforms such as AWS and GCP.Experience integrating security tools into CI/CD pipelines, and a demonstrated ability to automate security testing within development workflows.Nice to have experience:Familiarity with blockchain or cryptocurrency security challenges and solutions.Experience with Infrastructure as Code (IaC), particularly reviewing and securing Terraform code.Certifications such as CISSP, OSCP, or similar credentials, demonstrating a formalized knowledge of security principles and practices.Technologies we use and teach:Coding Languages: Java, Python, and JavascriptIaC: TerraformCloud: AWS, GCP, CloudflareCI/CD Pipeline: GitHub, GitHub Actions, JenkinsAPIs: REST APIsAbout ChainalysisBlockchain technology is powering a growing wave of innovation. Businesses and governments around the world are using blockchains to make banking more efficient, connect with their customers, and investigate criminal cases. As adoption of blockchain technology grows, more and more organizations seek access to all this ecosystem has to offer. That’s where Chainalysis comes in. We provide complete knowledge of what’s happening on blockchains through our data, services, and solutions. With Chainalysis, organizations can navigate blockchains safely and with confidence.You belong here. At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. Some of the ways we’re ensuring we keep learning are an internal Diversity Committee, Days of Reflection throughout the year including International Women’s Day, Harvey Milk Day, World Humanitarian Day, and UN International Migrants Day, and a commitment to continue revisiting and reevaluating our diversity culture. We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can’t wait to meet you. 

Mural, the leading visual work platform for the enterprise, makes teamwork feel like less work. Our intuitive visual workspace enables teams to easily work together and collaborate better using proven design-thinking techniques. Built for enterprise teams, Mural meets the most stringent of IT and regulatory requirements. Industry leaders — including IBM, ‌Microsoft, SAP, and Abercrombie & Fitch — choose Mural to help their teams accelerate innovation and problem solving at scale. Whether your team is fully remote, distributed, in the office, or still figuring it out, Mural brings teams across the enterprise together to do the work that matters most.ABOUT THE TEAM The product security plays a vital role in identifying and mitigating risks within the Mural product as well as partnering with other engineering teams to recommend product features that enhance security for our customers. YOUR MISSION As an Application Security Engineer, your role will involve executing the MURAL product security strategy. You will manage Mural’s public bug bounty submissions, SAST testing within our CI workflow. Collaborating closely with developers, you will work to expand security testing coverage and lead security reviews of MURAL product features. Additionally, you will play a crucial role in educating and promoting secure coding best practices. WHAT YOU'LL DO Performing security reviews of Mural product features and architecture Manage and operate our bug bounty program Lead penetration testing and manage any risks to remediation Implementation and operation of SAST and DAST technologies in the CI workflow Working closely with Engineering teams to track and manage product risks to remediation Working closely with Engineering to increase coverage of security testing Communicating and nurturing relationships with security researchers, customers, and other stakeholders Producing metrics to help track the health of our product vulnerability management strategy Educating and evangelizing secure coding best practices WHAT YOU'LL BRING 5+ years experience in a product security focused role Experience with product security at a multi-tenant SaaS company preferred Experience with vulnerability management Deep understanding of web application and mobile application security risks Deep understanding of Linux, Networking, Cryptography, and Cloud Architecture fundamentals Software development experience with Node.JS or other frameworks like React, Angular, etc. is a preferred Familiarity with MongoDB, Node.JS, Ruby, and/or Python is preferred.  If you have participated in public or private Bug Bounty programs, or have any other open source or community contributions, presentations, or blog posts in the security space, please share it with us! Excellent command of English, both written and verbal For roles based in New York City, California, Colorado, and Washington, the base salary for this role ranges from $160,000 - $200,000 + benefits. Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation.Equal Opportunity  We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.