Security Engineer

Allium is building the System of Record for Onchain Finance, ingesting, verifying, and standardizing data across 140+ blockchains and 30+ petabytes of history. They address four structural gaps in blockchain technology:

• Semantic Gap: Translating raw events into financial concepts like payments, trades, deposits, and staking income.
• Standardization Gap: Mapping thousands of protocols into a single canonical cross-chain schema.
• Infrastructure Gap: Read-optimized, globally distributed data at web scale.
• Accountability Gap: Auditable methodology, SLAs, and SOC 1 and 2 compliance.

Finance is moving onchain, with stablecoins, tokenized assets, trading, staking, and lending growing rapidly. Institutions need a trusted source of truth for onchain financial activity, similar to Bloomberg or DTCC in traditional markets. Blockchains are computers, not databases, and raw blockchain data is not usable at institutional scale.

About the Role

Allium is hiring a Security Engineer to build and operate the controls that protect Allium's infrastructure, applications, employee systems, and AI usage. The role involves:

• Securing cloud infrastructure and access: Implementing least privilege, phishing-resistant authentication, short-lived credentials, controlled privileged access, and reliable provisioning/deprovisioning. Improving cloud configuration, credential storage, and network protections.
• Securing AI agents and developer tools: Implementing permissions, execution isolation, network restrictions, and audit trails for coding assistants, agents, and tool integrations. Testing for prompt injection, tool misuse, and unintended data access.
• Building detection and response: Correlating identity, cloud, workload, and CI/CD telemetry to detect credential theft, unusual access, unauthorized agent actions, and data exfiltration. Investigating attacks and testing response procedures.
• Reducing software supply-chain risk: Assessing dependencies, CI/CD workflows, third-party integrations, and developer environments. Partnering with engineers to validate findings and remediate vulnerabilities.
• Moving quickly on relevant threats: Maintaining visibility into internet-facing services, evaluating new vulnerabilities, and helping patch or isolate affected systems.
• Automating and documenting: Using code and APIs to improve access reviews, configuration checks, evidence collection, and remediation tracking. Thoughtfully using AI for security work.
• Supporting employee security and enterprise assurance: Deploying and maintaining endpoint protections, device security baselines, and identity/SaaS controls. Providing clear technical evidence for audits and customer reviews.

Requirements

• 4+ years of relevant security, infrastructure, or software engineering experience, with direct responsibility for implementing security controls.
• Hands-on experience with a major cloud platform and a strong foundation in identity, networking, operating systems, and access control.
• Depth in at least two relevant areas, such as cloud security, detection and response, application security, vulnerability management, or corporate security.
• Experience investigating technical problems from logs and system behavior, testing hypotheses, and following issues through to resolution.
• Clear communication, practical judgment, and constructive working relationships with engineers and business teams.

Who We Serve

Allium powers three core personas:

• Finance, Accounting, and Risk Teams: Need reliable, audit-grade answers for financial reporting, reconciliation, compliance, risk monitoring, and defensible metrics.
• Engineers and Product Teams: Need low-latency, production-ready infrastructure for wallets, trading systems, payment rails, staking infrastructure, and real-time applications.
• Strategy, Research, and Executive Teams: Need clarity and insight for ecosystem economics, market structure, user behavior, competitive dynamics, and capital flow.

Customers include Visa, Stripe, G-SIB Banks, Big 4 Accounting firms, BCG, Coinbase, Phantom, Uniswap, and are cited by the Federal Reserve.