Prometheum

Product Manager

• Own product features end-to-end; from discovery and requirements through launch - for trading, onboarding, and custody solutions, working closely with engineering and design in a fast-moving, startup environment.
• Partner with stakeholders, engineers, and designers to write clear Business Requirements (BRDs) and Product Requirements (PRDs) that translate business goals into actionable specs.
• Drive the product lifecycle from ideation through launch, ensuring tight alignment between business needs and technical execution across trading, clearing, and broker-dealer onboarding workflows.
• Define product features and roadmap priorities, balancing short-term delivery with long-term platform scalability.
• Run Agile ceremonies and sprint planning; breaking down epics into user stories with crisp acceptance criteria that the team can ship against.
• Maintain clean, traceable documentation of features, user stories, and tasks in Jira and Confluence.
• Coordinate with internal teams and external partners (broker-dealers, financial institutions) to communicate requirements, manage timelines, and support testing.
• Serve as a go-to resource for product questions from partners and compliance teams around trading, settlement, and custody operations.
• Create and maintain product documentation, user guides, and release notes for platform updates and onboarding flows.
• Track product metrics and use data to assess feature adoption, surface insights, and inform next priorities.

Security Engineer

• This is a senior, hands-on role with intentionally broad scope.
• Cloud infrastructure, security operations, and regulatory compliance are consolidated into a single function rather than distributed across a large team.
• Design and maintain secure AWS cloud infrastructure using Terraform and Terragrunt, with a focus on IAM least-privilege, account isolation, and security guardrails across multiple AWS environments.
• Manage AWS network security: VPC segmentation and design, Transit Gateway architecture, PrivateLink for service isolation, Network Firewall, and Route 53 Resolver for DNS security.
• Manage and maintain Cloudflare infrastructure including DNS, WAF, and edge compute.
• Architect and operate Cloudflare Zero Trust — including Access policies, Tunnel configuration for private network routing, Gateway egress filtering and DNS security policies, and WARP client deployment.
• Manage and tune AWS-native security tooling: GuardDuty, Security Hub, Config, Inspector, CloudTrail, and WAF.
• Integrate security controls into CI/CD pipelines (GitHub Actions) — including SAST, DAST, container image scanning, dependency vulnerability checks, and secrets detection.
• Enhance container and workload security through image signing, admission controllers (Kyverno), runtime policies, and base image hygiene.
• Manage dependency and patch lifecycle across Docker images, Helm charts, Terraform modules, and application packages.
• Own and operate security monitoring and incident response: maintain SIEM/log aggregation pipelines, tune alerting for anomalous behavior and policy violations, lead root cause analysis, and document post-mortems.
• Conduct and coordinate vulnerability assessments; track findings through to remediation.
• Automate compliance checks and drift detection using infrastructure scanning and policy-as-code tooling.
• Participate in on-call rotation to respond to security and infrastructure incidents.
• Support SEC and FINRA compliance obligations by implementing and documenting technical controls, and partner with legal and compliance teams during audits and regulatory reviews.
• Document infrastructure patterns, access controls, and security architecture for audit readiness.

Product Manager

Senior Infrastructure Security Engineer