Security Architect
Upload My Resume
Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT
Requirements
• Experience with Bitcoin, Lightning, or blockchain protocols. • Contributions to open-source security tools or projects. • Security certifications (CISSP, OSCP, CEH, or equivalent) are a plus but not required. • 🔒 Stay Safe from Job Scams • All official Blockstream communication will come from an @blockstream.com email address. We will never ask you to share sensitive information or purchase equipment during the hiring process. If in doubt, contact us at [email protected]. Learn more about avoiding job scams here.
Responsibilities
• Define and drive security architecture across applications, services, and infrastructure. • Partner with engineering teams to design and implement secure software systems, focusing on backend and data security. • Conduct threat modeling, risk assessments, and security reviews for new and existing products. • Develop and enforce secure coding practices, frameworks, and review processes. • Collaborate with DevOps on cloud and container security, CI/CD hardening, and access controls. • Evaluate and integrate security tools for code scanning, vulnerability management, and incident response. • Guide and mentor engineers on best practices for secure application development. • Stay ahead of emerging security trends, compliance standards, and attack vectors — particularly in fintech and blockchain domains. • What We Look For in You (Required Qualifications): • 10+ years of experience in software engineering or security architecture roles. • Strong full-stack background with deep backend security expertise (Python, Go, C/C++, Rust, or similar languages). • Demonstrated experience designing and securing systems for enterprise fintech, banking, or blockchain environments. • Knowledge of cryptography, authentication, and key management. • Hands-on experience with cloud security (AWS, GCP, or similar). • Familiarity with threat modeling, secure SDLC, and modern application security frameworks (OWASP, NIST, ISO 27001). • Excellent communication skills — able to clearly articulate risks and solutions to both technical and non-technical stakeholders.
Benefits
• Equity: Explicitly mentioned as a benefit/compensation for Blockstream employees and contractors. • PTO: Mentioned with details on accrual rates, rollover policies, vacation days per year (15), sick leave policy allowing up to 3 consecutive business days off without notice required after the first week of employment or upon request from a doctor's note for longer absences. • Insurance: Explicitly stated as part of Blockstream’s benefits package, including medical and dental insurance with varying levels of coverage based on employee status (full time/part time). • Perks: Mentioned in the form of a company car available to employees for personal use. • Remote work options: Explicitly stated as an option provided by Blockstream's flexible working environment policy, allowing up to 2 days per week remotely with manager approval and adherence to core hours (10am - 4pm).