KMS Security Engineer (Security)

KMS Security Engineer (Security) Phantom https://phantom.com is the modern money app used by tens of millions around the world. Our product combines everything people need to manage, spend, and grow their money in one simple, intuitive experience. Phantom brings all the control and flexibility of crypto-powered finance, without unnecessary complexity, into mainstream consumer finance. By combining industry-leading security with thoughtfully designed tools, Phantom makes powerful financial tools feel approachable and easy to use. This focus on speed, control, and user experience has fueled rapid growth, with a community of 20M+ people, reaching #1 in the Google Play Store finance category, and consistently ranking as a Top 50 app across all categories, alongside some of the most recognizable consumer technology platforms in the world. RESPONSIBILITIES Security is core to the product and the reason why millions of people trust Phantom to securely store their crypto assets. As a Security Engineer, you will be responsible for identifying, exploiting and mitigating security vulnerability risks in our software applications, as well as conducting security assessments and investigations. You will work closely with development teams to ensure that security is integrated throughout the software development lifecycle. Join us on our mission to make the digital economy safe and easy to use for everyone. - Own critical security infrastructure/services for the company (Key Management for wallet infrastructure) - Perform regular security assessments on new projects, infrastructure and code. - Identify and mitigate security vulnerabilities in code, systems and networks through manual testing, automated tools, threat modeling and threat intelligence. - Keep up to date with the latest offensive security techniques, application security threats,  and best practices in the blockchain space, and recommend improvements to security posture - Write detailed reports of your findings and present them to management and technical teams, and help to prevent real-world attacks. - Work with development teams to implement secure coding practices and to ensure the integrity of cryptographic functions. - Collaborate with other teams such as development and platform to ensure that security is integrated throughout the organization. - Participate in incident response and incident management activities. - Leading large cross-team projects. QUALIFICATIONS - 7+ years of experience in offensive security techniques, with a focus on blockchain technology and cryptography. - Experience working with Key Managment Services - Strong understanding of security risks, vulnerabilities and concepts in web and mobile applications. - Proficient in code review for JavaScript & Typescript with a strong understanding of application security threats and offensive security techniques. - Write PoC’s to prove vulnerabilities, review and ensure that patch code meets the standards set by the repository owners and maintainers. - Strong analytical and problem-solving skills. - Good verbal and written communication skills. NICE TO HAVE - experience working as a security software engineer at crypto companies - experience developing key management solutions - experience working with HSM, trust computing, TEEs (AWS Nitro Enclave or Intel SGX) WHY WORK WITH US OPPORTUNITY We are a team of experienced builders in the blockchain and crypto industry. Our journey began from users seeking an easy, seamless path to accessing the crypto ecosystem. This passion fueled our exponential growth, allowing us to onboard over 7M+ active users in just over three years; with our user base growing weekly. Our dedication to a secure and seamless user experience has made us the leading wallet on Solana as well as our multi-chain approach enhances our platform's versatility, meeting the needs of a diverse and growing user base. By staying at the forefront of technology and user expectati ... (truncated, view full listing at source)