Security Engineer
Role in brief
Ondo Finance is seeking a Security Engineer to strengthen the security of their blockchain-based financial products. This role involves reviewing security architecture, implementing controls for on-chain and off-chain systems, and assessing smart contracts. Candidates with experience in blockchain security, smart contracts, and distributed systems, who can work remotely and contribute to a small team, should consider applying.
About the role
This role focuses on enhancing the security posture of blockchain-based financial products. Responsibilities include conducting security architecture reviews, with a specific emphasis on smart contract security, key management, and Web3 integrations. The engineer will also be responsible for implementing and refining security controls across both on-chain and off-chain systems, ensuring robust protection for digital assets.
A core part of the position involves performing security assessments of smart contracts and blockchain infrastructure, utilizing both manual review techniques and automated tooling. The Security Engineer will collaborate closely with engineering teams to embed security best practices throughout the development lifecycle, from threat modeling to pre-release checks, and will also support third-party security assessments and incident response.
Success in this role means contributing to a secure environment for Ondo Finance's institutional-grade, blockchain-enabled investment products. The engineer will help maintain security documentation and training materials, ensuring that security knowledge is shared and upheld across the organization. This position is suited for someone who can actively identify and mitigate security risks in a rapidly evolving DeFi landscape.
The compensation for this role ranges from $150,000 to $250,000 annually, in addition to future token rights and/or equity.
Skills that matter here
- security engineering: This role requires applying security engineering principles to blockchain products and infrastructure.
- blockchain: A working understanding of blockchain security principles is necessary for securing the company's products.
- smart contracts: The role involves assessing and securing smart contracts and DeFi protocols through reviews and assessments.
- DeFi: Experience with DeFi protocols is crucial for understanding and mitigating risks in decentralized finance.
- cryptography: Familiarity with cryptography is essential for understanding underlying security principles in blockchain.
Who this role suits
- A person with at least three years of experience in security engineering or a related field with a strong security focus.
- Someone who understands cryptography and blockchain security principles, with practical experience in smart contract or DeFi protocol assessment.
- An individual familiar with security fundamentals for distributed systems, including authentication, authorization, and secrets management.
- A candidate who can read code to identify security risks and write scripting language code for security solutions and automation.
From the employer
- Support security architecture reviews for blockchain products, focusing on smart contract security, key management, and Web3 integrations
- Implement and iterate on security controls for both on-chain and off-chain systems
- Perform security assessments of smart contracts and blockchain infrastructure (manual review and tooling-assisted)
- Participate in on-call rotation and incident response support as needed
- Partner with engineering teams to integrate security best practices into the development lifecycle (threat modeling, secure design reviews, pre-release checks)
- Support third-party security assessments and coordination with external auditors
- Help maintain security documentation, runbooks, and training materials
- 3+ years of experience in security engineering or adjacent infrastructure/software engineering with a strong security focus
- Working understanding of cryptography and blockchain security principles
- Experience assessing and securing smart contracts and/or DeFi protocols (professional experience or meaningful open-source contributions)
- Familiarity with security fundamentals for distributed systems (authn/authz, secrets management, network segmentation, logging/monitoring)
- Exposure to incident response and security monitoring workflows
- Ability to read code to identify and assess security risks; ability to write code in common scripting languages to support security solutions and automation
- Strong communication skills with both technical and non-technical stakeholders
- Competitive compensation including salary, future token rights, and/or equity (according to your preferences) — we re well-funded and believe that great talent deserves great compensation
- Full benefits (medical, vision, and dental) and flexible vacation policy (PTO)
- Small remote-first team across many countries — you ll be an early team member helping shape our vision, culture, and design practices
- A+ colleagues — our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, Pinterest, McKinsey, Circle, Uniswap, Phantom
- Best-in-class investors — we are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures
Questions about this role
What is the company's remote work policy?
Ondo Finance operates as a fully remote company with team members located across many countries.
What is the seniority level for this position?
This is a middle-seniority position requiring at least three years of experience in security engineering or a related field.
What are the key skills required for this role?
Key skills include security engineering, blockchain, smart contracts, DeFi, and cryptography, along with experience in assessing smart contracts and distributed systems security.