Security Engineer (Application)

Our goal is to make blockchain accessible to billions of people. The Alchemy Platform is a state-of-the-art developer platform that simplifies blockchain development. We have established ourselves as a leading infrastructure provider, facilitating over $105 billion in transactions for millions of users in nearly every country worldwide.

Our team comprises experts in scalable infrastructure, AI, and blockchain technology with extensive experience at renowned companies and universities like Google, Microsoft, Facebook, Stanford, and MIT.

Recently, Alchemy secured a Series C1 funding round led by Lightspeed and Silver Lake, valuing the company at $10.2 billion. Our previous investors include a16z, Coatue, Addition, Stanford University, Coinbase, Google's Chairman, Charles Schwab, and executives from other leading organizations.

We have powered the growth of top blockchain companies globally and have been prominently featured in TechCrunch, Forbes, Bloomberg, and other notable publications.

The Role

Our mission is to bring blockchain to billions of people, and this requires robust software solutions. As an Application Security Engineer at Alchemy, you will contribute to securing one of the most advanced and high-throughput distributed systems in the blockchain industry. Your primary focus will be on developing and deploying application security tools to safeguard our platform.

Responsibilities:

• Integrate dynamic and static application security testing (DAST/SAST) into our CI/CD pipeline.
• Identify, prioritize, and address technical risks related to features, products, infrastructure, and acquisitions.
• Establish and enforce best practices for application security, development, and deployment.
• Detect, assess, and mitigate vulnerabilities through our vulnerability management program.
• Collaborate and provide security guidance to engineers, product managers, and other team members.

Requirements:

• 2-5 years of industry experience in software engineering, preferably with a focus on security or operations.
• Deep understanding of web security, TLS/SSL, web authentication, and applied cryptography.
• Familiarity with threat models and industry-standard security tools.
• Experience with AWS technologies is a plus.
• Proactive and independent approach to initiating and implementing new ideas.
• Prior experience in startup environments.
• Exposure to Web3 technologies.
• Strong entrepreneurial mindset, including experience in founding companies or working on side projects.