Remote Jobs RockRemote Jobs Rock

Security Engineer

📅 May 5
Cloud SecurityAWSCloud-native ArchitectureCI/CD Pipelines
Apply Now

📜 Description

  • Design, implement, and improve secure cloud-native architectures and CI/CD pipelines.
  • Identify infrastructure risks, enforce security best practices, and harden systems across the technology stack.
  • Automate security controls and educate developers to prevent vulnerabilities.
  • Help develop information security policies, standards, procedures, awareness, and compliance programs.
  • Partner with engineering, infrastructure, and product teams to align security controls with business and technical needs.

🛠️ Requirements

  • 5+ years of experience in a security engineering role.
  • Mastery of cloud infrastructure, particularly AWS.
  • Prior experience focusing on infrastructure security and Kubernetes.
  • Familiarity with secret management tools like Vault or KMS.
  • Strong understanding of core information security concepts and major regulatory frameworks/standards (e.g. SOC2, ISO 27001, NIST CSF).
  • Experience conducting security design reviews, threat modelling, and security testing.
  • Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.

✨ Benefits

  • Remote-first global workforce + NY office
  • Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
  • Medical, dental & vision coverage (US + some other countries)
  • 401k retirement plan + company match (US only)
  • Wellness stipend
  • Home office set up / ergonomic equipment program
Full job description
At Offchain, we aren’t just building products: we’re leading a movement.
As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.
At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.
Why Offchain?
Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.
Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.
Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.
To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.
Attention Offchain Job Seekers:   This role cannot be performed in California, or Colorado.   Please be advised that there has been a rise in fraudulent recruiter activities, particularly within the Web3 space. If you would like to confirm whether someone is an Offchain employee or the legitimacy of an offer you received, please email jobs@offchainlabs.com   At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.

The Role

  • As a Security Engineer at Offchain, you will play a key role in defining and improving our cloud security posture and collaborate across teams to ensure that our operations are secure, compliant, and aligned with regulatory and industry best practices - such as SOC2.
  • What you'll do:

  • Leverage your extensive experience in Cloud Security to design, implement, and improve secure cloud-native architectures and CI/CD pipelines.
  • Apply deep expertise in cloud infrastructure security to proactively identify risks, enforce best practices, and harden systems across the entire technology stack.
  • Automate security controls and educate developers for future-proofing against vulnerabilities.
  • Play an active part in designing and evolving the company’s overall information security governance and compliance program through: policies, standards, procedures, awareness.
  • Work closely with engineering, infrastructure, and product teams to make sure controls fit both business objectives and technical realities.
  • What you'll need:

  • 5+ years of experience in a security engineering role.
  • Mastery of cloud infrastructure, particularly AWS.
  • Prior experience focusing on infrastructure security and Kubernetes.
  • Familiarity with secret management tools like Vault or KMS.
  • Strong understanding of core information security concepts and major regulatory frameworks/standards (e.g. SOC2, ISO 27001, NIST CSF).
  • Experience conducting security design reviews, threat modelling, and security testing.
  • Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.
  • Perks:

  • Remote-first global workforce + NY office
  • Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
  • Medical, dental & vision coverage (US + some other countries)
  • 401k retirement plan + company match (US only)
  • Wellness stipend
  • Home office set up / ergonomic equipment program
  • Jenzabar

    Enterprise Security Engineer

    🕒 5 days ago
    Jenzabar👥 201 - 500 employees🏢 Information Technology And Services

    Designs and maintains secure enterprise infrastructure across on-premises and cloud environments, setting architecture standards, governing identity and access, and strengthening security monitoring and detection.

    Enterprise Security ArchitectureCloud SecurityAzureGoogle Cloud Platform (gcp)
    Brightmachines

    Security Engineer

    🕒 2 days ago
    Brightmachines

    Executes day-to-day information security across corporate IT, platform, and product environments, maintaining ISO 27001 certification and advancing application security, vulnerability management, incident response, and customer compliance.

    Information Security OperationsISO 27001:2022Application SecurityOWASP Top 10
    Linear

    Senior / Staff Security Engineer

    🕒 8 days ago
    Linear👥 51 - 200 employees🏢 Computer Software

    Own hands-on security across product and infrastructure, from vulnerability management and threat modeling to incident response, cloud hardening, and automation that reduces risk as the platform scales.

    Security EngineeringVulnerability ManagementBug Bounty ProgramsProduct Security Testing
    Zero-Hash

    Security Architect

    🕒 8 days ago
    Zero-Hash👥 201 - 500 employees🏢 Financial Services

    The Security Architect designs and oversees security across cloud, product, and enterprise systems, combining blockchain and application security expertise to strengthen controls, detection, incident response, and secure development.

    Security ArchitectureAWS SecurityBlockchain SecurityApplication Security
    Ceresti Health

    Security Engineer

    🕒 3 days ago
    Ceresti Health👥 11 - 50 employees🏢 Hospital & Health Care

    Secures software and cloud systems by reviewing code, modeling threats, automating security controls, and running attack simulations, while partnering with Engineering to prioritize and close vulnerabilities.

    Application SecurityThreat ModelingCode ReviewPython

    Trusted by Remote Workers