Partner with SRE to harden and manage the security posture of global networking infrastructure, corporate VPN, and perimeter tooling (e.g., Cloudflare) to prevent unauthorized exposure.
Design and deploy internal tooling to support the SOC and Security Engineering teams.
Conduct threat modeling, design reviews, and architectural assessments for new and existing systems.
Maintain internal security documentation, standard operating procedures, and developer best-practice guidance.
Provide specialized infrastructure, cloud, automation, and CI/CD support during incident response operations and threat investigations.
WHAT YOU WILL NEED
4+ years of experience in Security Engineering, Platform Security or SRE/DevOps, with demonstrated ownership of security controls in production environments.
Ability to assess infrastructure security risks, conduct threat modeling and security design reviews, and translate findings into practical, scalable engineering controls.
Hands-on experience implementing security controls and automation in cloud environments (GCP preferred).
Experience designing secure CI systems and workflows, dealing with artifact provenance, approval flows, and code protection (GitHub Actions preferred).
Solid understanding of network-level security protocol concepts and mitigations (TLS, HTTPS, network segmentation).
Proficiency in Infrastructure as Code (Terraform) and modern scripting/automation languages (Python, Bash, or Go).
Strong analytical and problem-solving skills, with a bias toward automation over manual workflows and clear cross-team communication.
Familiarity with perimeter and monitoring tooling (e.g., Cloudflare/WAF, SIEM, Wazuh/HIDS, EDR, and incident-management platforms).
NICE TO HAVE
Knowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.
Hands-on experience building and maintaining a SIEM comprised of open-source and hosted components.
Experience securing consumer-facing web and iOS/Android applications.
Experience designing secrets policies and administering Vault or other HashiCorp products.
Proven track record of managing security vendor relationships and technical deliverables.
Hands-on experience administering secrets management platforms (e.g., HashiCorp Vault), including secret rotation and lifecycle automation.
COMPENSATION & PERKS
Full-time salary based on experience and meaningful equity in an industry-leading company
This is a role based in our London office, with a mandatory in-office presence four days per week.
Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.
ClassPass
Unlimited vacation policy; work hard and take time when you need it
Apple equipment
The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field
Flexible work culture
Blockchain is committed to diversity and inclusion in the workplace and is proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, color, national origin, gender, gender expression, sex, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, and apprenticeship. Blockchain makes hiring decisions based solely on qualifications, merit, and business needs at the time.
The personal data you provide will be used by Blockchain to process your application. To learn more about your rights, see our Applicant Privacy notice.
