Member of Technical Staff, Security

About the Position

Member of Technical Staff, Security

Anchorage Digital is seeking a skilled Member of Technical Staff, Security to join our team. In this role, you will build and maintain security automation and tooling to detect vulnerabilities through static and dynamic analysis across code and live systems.

Responsibilities

• Security Automation and Tooling: Build and maintain security automation and tooling to detect vulnerabilities through static and dynamic analysis across code and live systems.
• Security Assessments: Conduct application security assessments, penetration tests, and code reviews to identify high-risk security issues and provide secure development guidance.
• Vulnerability Management: Develop and operate vulnerability management workflows, partnering with engineering teams to prioritize and remediate findings.
• Security Guardrails: Establish and test security guardrails for code, cloud resources, and infrastructure components throughout the Anchorage platform.

Requirements

• Security Experience: 3+ years of hands-on experience in security engineering, application security, penetration testing, or security.
• Security Tooling and Automation: Experience building or maintaining security tools, integrations, or automation workflows using Python, Go, or similar languages.
• Vulnerability Assessment: Ability to identify and assess security vulnerabilities in applications, APIs, and cloud infrastructure, and effectively communicate remediation strategies.
• Static and Dynamic Analysis: Experience with tools like Semgrep, CodeQL, Burp Suite, or equivalent for identifying security issues in code and running systems.
• Cloud Security: Understanding of AWS security fundamentals including IAM, VPCs, security groups, and CloudTrail/logging.
• Incident Response: Ability to investigate security events, perform root cause analysis, and coordinate response efforts.
• Computer Science Fundamentals: Developed "computer science fundamentals," i.e. concurrency, algorithms, and data structures.
• Quality and Security Focus: Genuinely care about code quality and operational excellence. Prioritize security outcomes, end-user experience, and business value over "cool tech."

Nice to Have

• Bug Bounty Programs: Experience running or participating in bug bounty programs (HackerOne, Bugcrowd, etc.).
• Regulated Environments: Experience in a regulated financial services, fintech, or crypto environment.
• Blockchain Security: Exposure to blockchain security, smart contract auditing, or Web3 technologies.
• Open-Source Contributions: Experience building or contributing to open-source security tools.
• Certifications: Relevant certifications (OSCP, GWAPT, GCIH, AWS Security Specialty, etc.).
• Continuous Learning: Reading blockchain protocol white papers for fun, and staying up to date with the proliferation of crypto-asset innovations.

We Offer

• Remote Work: Full-Time - Remote position based in the United States.
• Collaborative Environment: Work with a team that fosters a security-first culture and cross-functional collaboration.

About the Company

Anchorage Digital is a leading company in the digital asset space, committed to providing secure and reliable services. Join our team to help us achieve our mission of securing the future of digital assets.

Apply for this job to become a vital part of our security team!