Senior Security Engineer

Responsibilities

• Lead the design and deployment of enterprise-grade security solutions to safeguard internal networks, applications, and infrastructure.
• Define and enforce organization-wide security policies and standards while owning the end-to-end vulnerability management lifecycle.
• Oversee real-time threat detection and response operations, including forensic investigations and root cause analysis for security incidents.
• Manage comprehensive security assessments across internal and third-party systems, including architecture reviews and infrastructure hardening.
• Guide secure development practices by applying advanced static and dynamic analysis to identify vulnerabilities and provide remediation guidance.
• Conduct threat modeling and risk analysis for high-value systems to proactively mitigate attack vectors.
• Architect and maintain internal security tooling to expand detection coverage and streamline response workflows.

Requirements

• Master’s degree in Computer Science, Software Engineering, Security Informatics, or a related field.
• Expertise in threat modeling and architectural risk assessment using structured methodologies such as STRIDE or DREAD.
• Advanced knowledge of the Secure Software Development Life Cycle (SSDLC), including static/dynamic analysis and vulnerability lifecycle management.
• Strong ability to conduct security assessments across network infrastructure, application architecture, and system configurations.
• Familiarity with cloud environments (AWS, Azure, or GCP) and CI/CD deployment workflows.
• Proficiency in Java and Python with applied skills in secure coding, debugging, and automation scripting.

Benefits

• Medical, vision, and dental insurance.
• 401(k) plan with company matching.
• Life and accidental death and dismemberment insurance.
• HSA (with high deductible plan) and FSA options.
• Flexible paid time off and holidays.

About the Company

Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications. Headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, and incident response for the global digital asset ecosystem.