Senior Security Engineer

About Hyphen Connect

Hyphen Connect is a decentralised exchange committed to innovating the trading experience by combining the best features of centralised and decentralised exchanges. Our focus is on building a safe, simple, and scalable platform for trading, differentiating ourselves by offering institutional-level systems and support while remaining entirely on-chain and decentralised.

The Opportunity: Senior Security Engineer

We are seeking a dedicated Senior Security Engineer to join our dynamic team. In this pivotal role, you will be instrumental in identifying, assessing, and mitigating risks across the entire organisation. You will collaborate closely with various teams to ensure robust security postures, playing a crucial part in shaping, constructing, and pioneering cutting-edge security solutions within the rapidly evolving Web3 industry.

What You’ll Be Doing

• Architecting, implementing, and managing comprehensive security solutions.
• Establishing and enforcing security policies, standards, and guidelines that comply with industry regulations and best practices.
• Participate in penetration testing and purple teaming with ongoing or new projects to ensure their security posture is at a high level.
• Monitoring and responding to security incidents, ensuring quick resolution.
• Building automation and leveraging security frameworks with engineers to improve security and reduce friction.
• Taking part in critical discussion topics, with the ability to challenge decisions and the status quo; we value collaboration and feedback as foundational principles of a great team.

What We’re Looking For

• Strong Information Security (InfoSec) skills, with proven experience in application security or a relevant field.
• Hands-on experience developing, engineering, or architecting within a public cloud environment.
• Experience with engineering, using infrastructure-as-code (such as Terraform and Ansible).
• Experience with performing threat modeling exercises or a very good understanding of the methodology and ability to assess a project's risk.
• Understanding of container and DevSecOps concepts (we use DefectDojo) with CI/CD experience.
• Familiarity with blockchain technology and cryptocurrency trading platforms.

Bonus Points

• Professional certifications such as OSCP, CISSP, CDP & CMTP.
• Experience with IT security frameworks such as SOC 2 and ISO 27001.

Key skills/competency

• Information Security
• Application Security
• Cloud Security
• Infrastructure-as-Code
• Threat Modeling
• DevSecOps
• CI/CD
• Blockchain Security
• Penetration Testing
• Incident Response