Lead Security Engineer
Institutional-grade infrastructure for embedded on-chain financial products, including branded stablecoin issuance, stablecoin movement, and yield activation.
Maintainer signals as of 9/25/2026
Funding history
Projects
About Paxos Labs
Paxos Labs provides enterprise infrastructure that enables fintechs, enterprises, and crypto-native teams to build, launch, and scale embedded on-chain financial products. Its current platform supports branded stablecoin issuance through Mint, stablecoin orchestration across networks through Transit, and yield activation on stablecoin balances through Earn, with compliance, reserve, routing, monitoring, and configurable program controls.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will elevate security across cloud infrastructure, operations, and smart contracts for a company building onchain financial products. The role includes internal audits, threat modeling, security tooling, incident response, training, and collaboration with smart contract and infrastructure teams.
Requirements
- Deep knowledge of cloud infrastructure and web2 security practices.
- Deep knowledge of cybersecurity standards and social engineering defenses.
- Experience building full-stack applications.
- Deep knowledge of EVM security tooling, testing, and best practices.
- Deep knowledge of common hacks and exploits in DeFi protocols.
- Deep knowledge of financial attack vectors in DeFi protocols.
- Experience with CTFs, bug bounties, or whitehat activities.
Responsibilities
- Conduct internal audits of cloud platform security across Azure and AWS.
- Implement best practices for key management, network security, and monitoring.
- Create threat models for first-party and third-party software, research vulnerabilities, and patch them.
- Collaborate with infrastructure engineers to detect, fix, and prevent exploits using reusable tools and processes.
- Develop incident response tooling and standard operating procedures.
- Conduct incident response training simulating hacks, alerts, and social engineering vectors.
- Secure non-code-related attack vectors in collaboration with technical and non-technical staff.
- Audit smart contract protocols and establish secure operational practices.
- Build full-stack tools to mitigate exploits and financial risks.
- Detect malicious mempool transactions and automate pauses across smart contracts on multiple chains.
- Define invariants and detect violations in real time.
- Integrate third-party security software where necessary.
Benefits
- Opportunity to build innovative crypto solutions for traditional enterprises.
- Work on projects with tangible impact on the global financial landscape.
- Continuous learning and professional development.
- Competitive salary and participation in ownership structures.
- Fast-paced, agile team environment.