Role in brief
Localcoin, a growing digital currency company, is seeking a Cybersecurity Engineer to secure its AWS-based infrastructure and applications. This role involves designing security systems, managing incident responses, and collaborating with engineering teams to integrate secure practices. Candidates with experience in cloud security, particularly in regulated environments like fintech or crypto, who can operate in a fast-paced setting, will find this role a good fit.
About the role
This role focuses on enhancing the security of Localcoin's AWS cloud environment and applications. The Cybersecurity Engineer will be responsible for designing and implementing security infrastructure, improving vulnerability management, and leading incident response efforts. This includes setting up SIEM, monitoring, and detection capabilities to protect the company's systems.
A key part of the position involves partnering with engineering teams to ensure secure system design and development practices. The engineer will also develop automation and tooling to streamline security operations and evaluate and strengthen IAM policies and access controls. This work supports the company's mission to simplify digital currency transactions globally.
Success in this role means contributing to a robust security posture for Localcoin, which operates in a rapidly evolving regulatory landscape. The engineer will support application security initiatives, manage external penetration testing, and collaborate with various stakeholders on compliance. This involves assessing overall security and providing recommendations for continuous improvement.
The salary for this position ranges from $100,000 to $150,000 USD.
Skills that matter here
- AWS: The role requires hands-on experience securing AWS and cloud-native infrastructure, including hardening, IAM, networking, and best practices.
- EC2: Experience with EC2 is implied through the general requirement for securing AWS cloud environments.
- ECS: Experience with ECS is implied through the general requirement for securing AWS cloud environments.
- RDS: Experience with RDS is implied through the general requirement for securing AWS cloud environments.
- Snowflake: Experience with Snowflake is implied through the general requirement for securing AWS cloud environments.
- Java: The role involves securing applications, and Java is listed as a skill, suggesting familiarity with securing Java-based systems.
Who this role suits
- A person with 3-5 years of experience securing cloud-native infrastructure, especially within AWS.
- Someone who understands modern security threats and can implement effective defensive controls.
- An individual comfortable operating in a high-ownership, fast-moving environment with evolving priorities.
- A professional experienced in fintech, cryptocurrency, or other regulated environments.
From the employer
WHAT YOU’LL BE DOING
- Design, implement, and harden security infrastructure across our AWS-based cloud environment.
- Build and improve vulnerability management and reporting processes across infrastructure and applications.
- Lead and coordinate security incident response efforts, including investigation, remediation, and postmortem analysis.
- Implement and manage SIEM, monitoring, alerting, and detection capabilities.
- Partner with engineering teams to design and maintain secure systems and development practices.
- Develop automation and tooling to improve security operations and reduce manual processes.
- Evaluate and strengthen IAM policies, access controls, and cloud security configurations.
- Support application security initiatives including secure SDLC practices, threat modeling, and testing workflows.
- Manage external penetration testing engagements and remediation tracking.
- Collaborate with vendors, auditors, and compliance stakeholders on security and regulatory initiatives.
- Contribute to policies, standards, and operational procedures aligned with evolving regulatory requirements.
- Assess the organization’s overall security posture and provide practical recommendations for improvement.
WHAT WE’RE LOOKING FOR
- 3–5 years of hands-on experience securing AWS and cloud-native infrastructure, including infrastructure hardening, IAM, networking, and cloud security best practices.
- Deep understanding of networking, Linux systems, IAM, and infrastructure security principles.
- Experience with application security practices and secure software delivery.
- Experience managing penetration testing programs and remediation processes.
- Experience operating in fintech, cryptocurrency, or other regulated environments.
- Strong understanding of modern security threats, attack vectors, and defensive controls.
- Ability to write code, automation, or tooling to improve security operations.
- Experience working cross-functionally with engineering and infrastructure teams.
- Strong incident response and troubleshooting capabilities.
- Comfortable operating in high-ownership, fast-moving environments with evolving priorities.
WHAT YOU’LL LOVE ABOUT US
- Competitive Salary & Benefits – We value and reward our team members.
- RRSP Group Matching Program – We invest in your financial well-being.
- Hybrid Work Environment – Enjoy flexibility while being part of a dynamic team.
- Professional Development – Opportunities for learning and growth covered by Localcoin.
- Team Culture & Events – Regular socials, team meetings, and collaborative workspaces.
- Impactful Work – Play a key role in a growing company and make a real difference.
- Great Place to Work® Certified – Proudly recognized for our positive workplace culture and employee experience 2 years in a row.
Questions about this role
What is the remote work policy for this role?
This position offers a hybrid work environment, combining remote work with in-office collaboration.
What level of experience is required for this role?
Candidates should have 3-5 years of hands-on experience in securing AWS and cloud-native infrastructure.
What are the core technical skills needed?
Key technical skills include AWS expertise, a deep understanding of networking, Linux systems, IAM, and infrastructure security principles, along with experience in application security practices.
Similar jobs
