Security Engineer

At Offchain, we aren’t just building products: we’re leading a movement.    As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.    At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.    Why Offchain?   Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.   Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.   Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.   To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.
The Role

As a Security Engineer at Offchain, you will play a key role in defining and improving our cloud security posture and collaborate across teams to ensure that our operations are secure, compliant, and aligned with regulatory and industry best practices - such as SOC2.

What you'll do:

Leverage your extensive experience in Cloud Security to design, implement, and improve secure cloud-native architectures and CI/CD pipelines.

Apply deep expertise in cloud infrastructure security to proactively identify risks, enforce best practices, and harden systems across the entire technology stack.

Automate security controls and educate developers for future-proofing against vulnerabilities.

Play an active part in designing and evolving the company’s overall information security governance and compliance program through: policies, standards, procedures, awareness.

Work closely with engineering, infrastructure, and product teams to make sure controls fit both business objectives and technical realities.

What you'll need:

5+ years of experience in a security engineering role.

Mastery of cloud infrastructure, particularly AWS.

Prior experience focusing on infrastructure security and Kubernetes.

Familiarity with secret management tools like Vault or KMS.

Strong understanding of core information security concepts and major regulatory frameworks/standards (e.g. SOC2, ISO 27001, NIST CSF).

Experience conducting security design reviews, threat modelling, and security testing.

Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.

Perks:

Remote-first global workforce + NY office

Annual company offsite + team onsites

Professional reimbursement program (facilitates industry conference attendance, certifications, and more)

Medical, dental & vision coverage (US + some other countries)

401k retirement plan + company match (US only)

Wellness stipend

Home office set up / ergonomic equipment program

Attention Offchain Job Seekers:   This role cannot be performed in California, or Colorado.   Please be advised that there has been a rise in fraudulent recruiter activities, particularly within the Web3 space. If you would like to confirm whether someone is an Offchain employee or the legitimacy of an offer you received, please email jobs@offchainlabs.com   At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.