About Story
Story is on a mission to revolutionize how creative intellectual property (IP) is developed and distributed in the internet era. The internet enables unprecedented creative collaboration — remixing, participatory franchises, and AI-generated content — yet the current IP infrastructure hampers this openness. At Story, we're building an IP infrastructure layer that embraces and enhances digital co-creation. Our open IP repository records the evolution of creative works across multiple media types, ensuring provenance, attribution, and frictionless collaboration. Inspired by how Git transformed software development, we’re pioneering a new paradigm for IP creation, empowering creators to share value and contribute to an ecosystem of innovation.
Our team is composed of industry experts from media, technology, and business, with backing from leading VCs globally. Join us as we build the future of IP.
About the Role
As a Security Engineer at Story, you will play a critical role in safeguarding the integrity, confidentiality, and availability of our platform. You’ll be responsible for developing, implementing, and maintaining security measures that protect our protocol and the sensitive data it handles. Working closely with our engineering teams, you will ensure that security is embedded into every layer of our technology stack — from L1 blockchain, smart contracts to our backend service, and cloud infrastructure.
This is a unique opportunity to define and lead the security strategy at a fast-paced, innovative blockchain company that’s at the forefront of the IP evolution.
Responsibilities
- Design and implement security measures across Story’s infrastructure, including cloud services, smart contracts, APIs, and databases, to ensure end-to-end protection.
- Perform security assessments on the platform’s smart contracts, APIs, and services, identifying and mitigating vulnerabilities.
- Develop and integrate security tools and processes for continuous monitoring, logging, and real-time alerts to proactively detect and respond to potential threats.
- Collaborate with engineering teams to ensure secure coding practices, conducting regular code reviews and security audits of new features and updates.
- Lead incident response efforts and work on post-mortem analysis to prevent recurrence of security incidents.
- Evaluate third-party integrations for security risks, ensuring that all external partners and services comply with our security standards.
- Stay ahead of emerging security threats in the blockchain/web3 space and contribute to the development of our threat intelligence framework.
- Contribute to security policy development and foster a culture of security awareness across the organization through training and guidance.
Who you are:
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field.
- 5+ years of experience in security engineering, with a focus on blockchain technology, cloud infrastructure, web applications and services.
- Deep understanding of security best practices for cloud platforms (AWS, GCP, or similar), including knowledge of IAM, network security, and infrastructure hardening.
- Proven experience in performing security assessments and identifying vulnerabilities in code, infrastructure, and third-party services.
- Familiarity with common security frameworks such as OWASP, NIST, and CIS.
- Excellent problem-solving skills, with the ability to proactively mitigate potential risks before they become critical issues.
- Strong communication skills, capable of articulating complex security concepts to both technical and non-technical stakeholders.
- Passion for blockchain and web3 technologies is a major plus.
- Experience with cryptographic protocols, including blockchain consensus algorithms, smart contract security, and key management is considered a bonus.
- Bay Area or willing to relocate. The position requires working in-office three days a week.
This role is an excellent fit for a security expert who thrives in a fast-paced environment and is excited to work at the intersection of blockchain technology and IP innovation. Join us as we secure the future of creative collaboration!
