Security Engineer, Privy

Details

Who We Are

About Privy

Privy's mission is to make privacy and user ownership the default online. The company builds simple, flexible APIs and tools for developers to create products on crypto rails.

Privy owns the abstractions and infrastructure layer above wallets, integrating across chains, third-party providers, and Stripe products such as Treasury and Link. The team solves technical problems involving hardware enclaves, multi-region low-latency APIs, and blockchain abstractions using technologies including Node, React, and AWS.

About the Team

Engineering at Privy is characterized by high urgency, strong product judgment, and a security mindset. Engineers ship small iterations quickly, work closely with developer customers, and incorporate security into their designs from the start.

Responsibilities

• Own security engineering work end to end, including investigating alerts, findings, anomalies, and security requests; identifying root causes; driving remediation; and documenting outcomes.
• Participate in Privy's security on-call rotation, responding to incidents, triaging alerts, supporting vulnerability workflows, completing access reviews, and handling security escalations.
• Build and maintain production-quality tooling to reduce manual work, including alert enrichment, automated triage and routing, remediation workflows, access-review automation, and detection improvements.
• Lead focused investigations into suspected security events or compromises, gathering evidence methodically and coordinating the appropriate response.
• Identify recurring sources of operational toil and engineer durable solutions that improve team speed, consistency, and scalability.
• Partner with product and engineering teams to assess security risks, review lower-complexity designs and implementation plans, and make practical security tradeoffs.
• Contribute across application, infrastructure, cloud, and product-security areas while developing broad context and deeper expertise.

Requirements

Minimum Requirements

• Experience as a security engineer, detection engineer, or similarly hands-on engineer in a technically demanding environment.
• Strong software-engineering skills in Python, Go, Ruby, or a similar language, with the ability to build maintainable tooling and contribute to production fixes.
• Experience investigating security signals, incidents, vulnerabilities, suspicious activity, or other ambiguous technical problems through to resolution.
• Familiarity with security operations, incident response, vulnerability management, detection engineering, access reviews, or related operational-security workflows.
• Strong understanding of web, browser, infrastructure, or cloud security, with the ability to apply that knowledge across a broad range of problems.
• Good judgment under pressure, a methodical approach to investigation, and comfort working independently with incomplete information.
• Strong communication and collaboration skills, including the ability to explain technical findings, risks, and recommended actions clearly to clients and internal stakeholders.
• A self-directed approach to work, including identifying gaps, progressing through ambiguity, and reliably closing the loop.

Preferred Qualifications

• Experience with AWS, GCP, or other cloud-security environments.
• Experience with detection engineering, security automation, incident-response tooling, or remediation pipelines.
• Bug-bounty experience, offensive-security exposure, or a strong attacker-minded approach to investigation.
• Experience with IAM, secrets management, secure production access, or secure CI/CD.
• Background in application security, infrastructure security, cryptography, or privacy engineering.
• Experience with fintech, payments, blockchain, or another diligence-forward financial product domain.
• Experience helping shape security operations, incident-response practices, vulnerability-management workflows, or a bug-bounty program.