or apply directly on Blockchain.com's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 26 days Blockchain.com's roles stay open a median of 45 days
- Reposted
- No
- Salary listed
- No 0% of Blockchain.com's roles list one
- Ghost-job risk at Blockchain.com
- high 30 stale, 1 reposted of 45 open
- Hiring momentum
- 48 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-09-17
Measured from postings appearing on and disappearing from Blockchain.com's own greenhouse board since 2026-08-03. Full hiring picture for Blockchain.com.
About this role
In this role, you will lead the Product Security program for Blockchain.com’s products, focusing on integrating security into the development lifecycle. Your responsibilities include threat modeling, overseeing security automation, conducting code reviews, and mentoring junior engineers. You will also manage the Bug Bounty program and negotiate security remediation with engineering teams while ensuring compliance with security standards.
- benefits
- 3/5
- freshness
- 4/5
- career value
- 5/5
- role clarity
- 5/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Blockchain.com as an employer.
What you need
- 4+ years total security engineering experience with at least 3+ years focused specially in application/product security or equivalent.
- Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing)
- Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar.
- Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python, and familiarity with containerised deployments (Kubernetes).
- Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).
- Experience building CI checks, test harnesses and lightweight fuzzing/property tests.
Nice to have
- Prior fintech/Trading/OTC product security experience or familiarity with custody/signing patterns.
- Practical experience designing or deploying AI-assisted security tooling, leveraging LLMs for automated software patch generation, or evaluating vulnerability detection agents within enterprise developer pipelines.
- Prior experience operating alongside GRC frameworks, authoring developer-facing security policies from scratch, and building automated policy-as-code gateway integrations.
- Public track record of CVEs, security research, or open-source contributions to security tooling.
- Advanced credentials such as OSCP, OSWE, CISSP or equivalent.
What you get
- Unlimited vacation policy; work hard and take time when you need it.
- Unlimited books policy; order the technical resources you need or simply pick something up from our company library.
- Apple equipment.
- Full-time salary based on experience and meaningful equity in an industry-leading company.
- Role based in our Paris office, with a mandatory in-office presence four days per week.
- Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.
Worth weighing
- Role involves significant hands-on responsibilities, which may not suit those looking for a purely strategic position.
- In-office presence required four days a week, which may limit flexibility for some candidates.
- No specific salary range mentioned, which could be a consideration for candidates evaluating compensation.
- The role includes mentoring responsibilities, which may require additional soft skills beyond technical expertise.
Summarised from Blockchain.com's posting. Read the full original.
Listed by Blockchain.com on their greenhouse job board, last confirmed open on 2026-09-17. PitchMeAI is not the employer.