IT Security Engineer

Interested in working in cutting-edge blockchain technology companies and creating equitable access to the global financial system? Since 2014, the mission-driven team at the Stellar Development Foundation (SDF) has helped fuel the tremendous growth of the Stellar blockchain network, an open-source platform that operates at high-scale today. Recently, the Stellar network saw a significant upgrade in the form of Soroban, a new Smart Contracts platform. Developers and companies around the world are already building on Soroban, and the SDF team is expanding to support the rapidly growing and changing Stellar ecosystem.

SDF is looking for an experienced IT Security Engineer who will work closely with partner corporate administration teams as well as engineering to ensure Stellar Development Foundation is secure. You will integrate security requirements using SecOps methodologies throughout your daily work.

In this role you will: 

• Lead efforts to design and improve our security vulnerability management programs both proactively (audits, etc) and reactively (patching policy, CVE tracking, etc)
• Establish a security framework (processes, training, etc) with the organization to incorporate security best practices in our everyday work.
• Build strong "security minded" policies with our partner teams to establish best practices and enforcement at SDF.
• Identify and build improvements on security tooling, processes, and documentation.
• Manage security reviews of third party vendors and track surface area of risk for use of their products and integrations at SDF.
• Develop and implement security solutions for network systems, ensuring compliance with future cybersecurity requirements.
• Work closely with the IT & engineering teams on security analyses using SIEM tools and vulnerability assessments.

What You Will Bring:

• 5+ years of experience in enterprise corporate security or similar
• Knowledge of access control and identity management systems
• Experience with network protocols and secure network design
• Proven experience in corporate security policy and familiarity with cybersecurity frameworks
• Strong analytical skills with experience in SIEM tools like Splunk, vulnerability analysis, and risk assessments
• Ability to coordinate security activities and lead technical aspects of security audits
• Capability to build and run security training programs for the entire organization
• Experience in developing and implementing technical solutions and processes to enhance our security stance
• A strong track record working in a collaborative environment
• Experience consulting with external vendors
• Experience with MITRE, NIST, OWASP frameworks

Nice to have:

• Experience working on open source projects
• Active participation in the crypto community
• Experience with security solutions like SEIM tooling, Wazuh, and Jamf
• Experience in developing policy and collaboration with executive level roles

Why work for us:

• You’ll have autonomy in the team to self start on projects and work
• You will be able to make visible impact quickly and will have a strong influence on the team’s direction, tooling, processes and technology choices
• You will work on many open source projects that aim to improve financial inclusion on a global scale

We offer competitive pay with a base salary range for this position of $150,000 - $190,000 depending on job-related knowledge, skills, experience, and location. In addition, we offer lumen-denominated grants along with the following perks and benefits: