VP, Senior Product Security Engineer
Galaxy is seeking a Senior Product Security Engineer to enhance the security of its microservices and cloud applications. This role involves collaborating with Engineering, Product, and Infrastructure teams to design and implement secure software solutions within a rapidly growing company. The position reports to the Director of Product Security and focuses on assessing and improving the security of advanced trading systems and blockchain architectures.
Key responsibilities include participating in secure software design and code reviews, developing and reviewing test plans to ensure comprehensive security coverage, and assisting teams in mitigating identified vulnerabilities by assessing impacts and providing technical guidance. The role also involves advising on cloud application and infrastructure security design patterns, offering training on secure software development practices, and enhancing implementations of authentication, authorization, and data access layers. Additionally, the engineer will research and propose advanced security patterns, such as multi-party computation and confidential computing.
Candidates should possess a bachelor's or postgraduate diploma in cybersecurity or technology, along with at least five years of experience in product security, application security, cloud security, or developing security features. Essential skills include threat modeling, risk assessment, and controls review, as well as proficiency in programming languages. Experience with security testing tools like SAST, DAST, and SCA is required, along with a deep understanding of topics such as authentication and authorization technologies, TLS and PKI, network security, cloud security, and system security. Strong analytical skills, attention to detail, strategic thinking, and excellent communication abilities are also necessary. Security or cloud certifications are preferred.
The company offers a competitive base salary and discretionary bonus, along with company-paid health and protective benefits for employees and their eligible dependents. Additional benefits include free virtual coaching and counseling sessions, opportunities to learn about the crypto industry, and a collaborative work environment with smart, entrepreneurial colleagues. Employee Resource Groups are also available to support professional development and community engagement.