Principal Security Engineer
Auros is an algorithmic trading and market-making firm focused on liquidity provision in the digital asset space.
About Auros
Auros is an algorithmic trading and market making firm that delivers liquidity for exchanges and token projects. The firm combines high-frequency trading technology with strategic partnerships to provide consistent market making services. With operations across multiple global venues, Auros focuses on reducing trading friction and enhancing token accessibility through contractualized performance metrics.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will implement and maintain security controls across multi-cloud (AWS, Azure, GCP, AliCloud) and on-premises infrastructure. You will own IAM strategy and implement identity and access models, design and operate key management and custody controls such as HSMs and secrets management, harden CI/CD pipelines, secure corporate security tooling, respond to incidents, conduct security assessments, automate detection and response, and embed security into cloud provisioning and system configuration.
Requirements
- 8+ years hands-on experience in security engineering or security operations
- Experience designing and implementing IAM across cloud environments
- Working knowledge of cloud security controls across multiple providers with emphasis on AWS and Azure
- Experience securing CI/CD platforms, with GitLab preferred
- Familiarity with corporate IT security tooling such as Jamf, endpoint protection, DLP and SSO/IdP
- Comfortable in Linux environments and scripting with Python, Bash or similar
- Experience with infrastructure-as-code such as Terraform or Pulumi is a plus
- Exposure to financial services, crypto or other regulated environments is a plus
Responsibilities
- Implement and maintain security controls across multi-cloud and on-premises infrastructure
- Own IAM strategy and implementation
- Design and operate key management and custody controls such as HSMs and secrets management
- Harden CI/CD pipelines and secure the software delivery process
- Configure and operate corporate security tooling including endpoint protection, MDM/Jamf and DLP
- Respond to security incidents by triaging, investigating, containing and remediating
- Conduct security assessments of infrastructure and applications
- Automate detection, alerting and response
- Embed security into cloud provisioning and system configuration
Benefits
- Direct ownership of security implementation
- A small technical team where your work has immediate impact
- Exposure to low-latency trading infrastructure and the digital asset space