Senior Security Engineer/Manager

About Hyphen Connect

Hyphen Connect is a decentralised exchange focused on innovating to provide the best features of both Centralised (CEXs) and Decentralised Exchanges (DEXs). The platform aims to be safe, simple, and scalable for trading, distinguishing itself by offering institutional-level systems and support while remaining on-chain and decentralised.

We are actively seeking a Senior Security Engineer/Manager to join our dynamic team. In this pivotal role, you will be instrumental in identifying, alerting, mitigating, and preventing security risks across the entire organisation, collaborating closely with every team.

What You’ll Be Doing

• Architecting, implementing, and managing comprehensive security solutions.
• Establishing and enforcing security policies, standards, and guidelines that comply with industry regulations and best practices.
• Participating in penetration testing and purple teaming for ongoing or new projects to ensure a high security posture.
• Monitoring and responding to security incidents, ensuring quick resolution.
• Building automation and leveraging security frameworks with engineers to improve security and reduce friction.
• Taking part in critical discussion topics, with the ability to challenge decisions and the status quo, as collaboration and feedback are foundational principles of our team.

What We’re Looking For

• Strong Information Security (InfoSec) skills, with proven experience in application security or a relevant field.
• Hands-on experience developing, engineering, or architecting within a public cloud environment.
• Experience with engineering, using infrastructure-as-code (such as Terraform and Ansible).
• Experience with performing threat modeling exercises or a very good understanding of the methodology and ability to assess a project's risk.
• Understanding of container and DevSecOps concepts (we use DefectDojo) with CI/CD experience.
• Familiarity with blockchain technology and cryptocurrency trading platforms.

Bonus Points

• Professional certifications such as OSCP, CISSP, CDP & CMTP.
• Experience with IT security frameworks such as SOC 2 and ISO 27001.

Key skills/competency

• Information Security (InfoSec)
• Application Security
• Public Cloud Environments
• Infrastructure-as-Code (Terraform, Ansible)
• Threat Modeling
• DevSecOps
• CI/CD
• Blockchain Technology
• Cryptocurrency Trading Platforms
• Risk Management