Senior Security Engineer – Infrastructure

Ondo Finance

Senior Security Engineer responsible for cloud security posture across AWS and GCPs. Leading security initiatives and mentoring engineers at Ondo Finance's remote team.

Posted 7/27/2026full-timeRemote • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security posture management across AWS and GCP, with a strong focus on Infrastructure as Code (IaC) practices, incident response, and mentoring engineering teams on security best practices.

Highest-signal resume keywords

Cloud Security EngineeringInfrastructure as Code (IaC)AWS and GCP ExperienceScripting in Python or GoKubernetes Security Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security Posture ManagementInfrastructure as Code (IaC)Incident ResponseSecrets ManagementOffensive Security TestingRisk AssessmentIAM DesignCI/CD SecurityThreat ModelingProduction Experience

Soft Skills

MentoringCollaboration

Tools & Technologies

AWSGCPKubernetesCloud Security PlatformsTerraform

Industry Keywords

Cloud SecurityIdentity and Access Management (IAM)Least-Privilege AccessSupply-Chain RiskContainer Security

Tech Stack

Tools & technologies

AWSAzureCloudGoGoogle Cloud PlatformKubernetesPythonTerraform

About the role

Key responsibilities & impact

Own cloud security posture across AWS and GCPs: IAM, network, encryption, logging, and account structure.
CNAP: prioritize findings against real risk, drive remediation through engineering, and measure progress.
Design and enforce IaC guardrails: pre-merge policy-as-code, required modules, and CI gates that make the secure path the default.
Lead identity and access design across cloud, IdP, and developer platforms. Drive least-privilege as a continuously enforced property, not an annual project.
Own secrets management strategy and migration off of long-lived credentials wherever feasible.
Run focused offensive testing against our own infrastructure: cloud red-team scenarios, IAM privilege-escalation paths, CI/CD supply-chain attack paths, and lateral-movement chains. Translate findings into durable controls.
Partner with SecOps on detection coverage for cloud control-plane abuse and with Product Security on the infra side of application threat models.
Drive third-party and supply-chain risk for infra components: container base images, build pipelines, OSS dependencies in Terraform modules, and IaC providers.
Lead incident response for infra-rooted incidents alongside the SecOps lead.
Mentor engineers on threat modeling, secure-by-default infra patterns, and how to reason about blast radius.

Requirements

What you’ll need

3-5+ years in security engineering with deep focus on cloud and/or infrastructure.
Strong IaC skills — you have written, reviewed, and refactored real IaC at scale, and you can explain the failure modes of large IaC codebases.
Production experience across AWS, GCP, or Azure.
Hands-on experience with a cloud security platformn
Strong scripting skills in Python or Go.
Working knowledge of Kubernetes security (RBAC, admission control, workload identity) if our stack uses it; bonus if you can operate it.
Comfort owning a domain end-to-end: design, build, operate

Benefits

Comp & perks

Competitive compensation including salary, future token rights, and/or equity (according to your preferences) — we're well-funded and believe that great talent deserves great compensation
Full benefits (medical, vision, and dental) and flexible vacation policy (PTO)
Small remote-first team across many countries — you'll be an early team member helping shape our vision, culture, and design practices
A+ colleagues — our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, Pinterest, McKinsey, Circle, Uniswap, Phantom
Best-in-class investors — we are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures