KMS Security Engineer (Security)

📋 Description

• • Phantom Technologies, Inc. is seeking a highly skilled and motivated KMS Security Engineer to join our dynamic team. As a critical member of our security department, you will play a pivotal role in safeguarding our cutting-edge financial platform, which is trusted by tens of millions of users worldwide to manage, spend, and grow their money. Our product uniquely blends the power of crypto-enabled finance with a user-friendly interface, making sophisticated financial tools accessible to everyone without unnecessary complexity.
• • In this role, you will be instrumental in identifying, exploiting, and mitigating security vulnerabilities across our software applications, infrastructure, and code. Your expertise will be crucial in conducting thorough security assessments and investigations, ensuring the integrity and safety of our platform. You will collaborate closely with our talented development teams, embedding security best practices throughout the entire software development lifecycle (SDLC) and championing a security-first mindset.
• • A core responsibility will be to own and manage critical security infrastructure and services, with a particular emphasis on Key Management Services (KMS) for our wallet infrastructure. This involves ensuring the robust security and availability of cryptographic keys, which are fundamental to the trust and security of our users' crypto assets.
• • You will conduct regular, in-depth security assessments of new projects, infrastructure deployments, and existing codebases. This proactive approach will involve identifying and mitigating security risks before they can be exploited, utilizing a combination of manual testing, advanced automated tools, sophisticated threat modeling, and up-to-the-minute threat intelligence.
• • Staying ahead of the curve is paramount. You will be expected to continuously keep abreast of the latest offensive security techniques, emerging application security threats, and evolving best practices, especially within the rapidly advancing blockchain and cryptocurrency space. Your insights will be vital in recommending and implementing improvements to our overall security posture.
• • A key output of your work will be the creation of detailed, comprehensive reports documenting your findings. These reports will be presented to both management and technical teams, providing clear insights into potential risks and actionable recommendations to prevent real-world attacks and protect our user base.
• • You will actively work with development teams to foster the adoption of secure coding practices. This includes providing guidance on implementing cryptographic functions securely and ensuring the overall integrity of our software from a security perspective.
• • Collaboration is key to our success. You will work closely with various teams, including development, platform engineering, and operations, to ensure that security considerations are seamlessly integrated into all aspects of the organization's activities and workflows.
• • You will be a crucial participant in our incident response and incident management processes. This involves contributing to the swift and effective resolution of security incidents, minimizing impact, and conducting thorough post-incident analyses to prevent recurrence.
• • Furthermore, you will have the opportunity to lead significant, cross-team security projects, driving initiatives that enhance our security capabilities and protect our rapidly growing user community. This leadership aspect will allow you to make a substantial impact on the company's security strategy and execution.
• • Our mission is to make the digital economy safe and easy to use for everyone. By joining Phantom, you will be contributing to a product that is at the forefront of innovation, simplifying access to the crypto ecosystem and empowering millions of users globally. You will help shape the future of finance by ensuring a secure and seamless user experience, which is critical for onboarding new users and fostering the growth of the entire crypto industry. We are building a unified, multi-chain experience, and your role in securing this complex ecosystem is vital.