Provable Markets

Application Engineer

• Own application-layer security across Provable’s products, internal services, and developer-facing tooling
• Perform threat modeling, security architecture reviews, and design reviews for new systems and features
• Identify, reproduce, and remediate vulnerabilities across APIs, web services, SDKs, and backend systems
• Build and embed secure development practices, including secure coding standards, dependency security, access controls, and CI/CD integration
• Partner with engineers on testing, audits, incident response, and ongoing security improvements in a privacy-first environment

Application Security Engineer

Security Engineer

• Manage and secure cryptocurrency private keys, ensuring best practices for key management.
• Implement and enforce policies for key storage and access, including the use of hardware security modules (HSMs) and multi-signature setups.
• Secure and audit GCP infrastructure and practices, including IAM roles, security groups, and other GCP security features.
• Perform regular security audits and compliance checks to identify and address vulnerabilities.
• Set up and manage Multi-Factor Authentication (MFA) for all critical systems.
• Monitor and respond to security incidents and alerts, conducting vulnerability assessments and penetration testing.
• Perform system administration tasks, ensuring the high availability and reliability of infrastructure.
• Participate in on-call rotations to maintain and troubleshoot infrastructure issues.
• Develop and maintain security policies, procedures, and documentation.
• Conduct security training and awareness programs for staff, keeping up with the latest security trends and technologies.