Chainalysis

2 months ago

Staff Security Engineer, Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Technical lead for product security across one or more SaaS product areas. Own security reviews for launches and AI tooling, perform hands-on pentests, manage the Vulnerability Disclosure Program, drive SOC2 and risk-framework work across R&D, and contribute fixes directly into product repos. Collaborate with product/engineer teams across AWS and Kubernetes, and participate in on-call for high-severity incidents.

Location: United Kingdom

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Lead Product Security across Chainalysis' SaaS offerings, partnering with product and platform engineering teams on design, code, and remediation
•Own Unified Security Review process for new product launches, vendor evaluations, and AI tooling — including custom penetration tests scoped to each review
•Drive Security Engineering Risk Management Framework, for consistent risk classification and remediation tracking across product
•Lead the Vulnerability Disclosure Program and security bug reporting workflow, from researcher intake through fix
•Drive SOC2 and compliance-related security remediation across product engineering, partnering with R&D leads on architectural fixes

Key Requirements

•8+ years of application security engineering experience.
•Strong production coding ability in at least one of Java (preferred), TypeScript/JavaScript, Python, or Go — enough to perform deep code review, write proof-of-concept exploits, and contribute fixes directly into product repos.
•Building security automation into CI/CD pipelines
•Hands-on penetration testing of production SaaS applications, including custom tests scoped to new product launches
•Threat modeling, secure design reviews, and static/dynamic code analysis across the SDLC

Experience:8+ yearsSaaSCybersecurity

Skills:LeadershipCommunicationProblem-solvingTeamworkCritical thinking

Tech Stack:AWSKubernetesTerraformWizSonarCloudBurpCloudflareGitHubGitHub ActionsArtifactoryJavaJavaScriptPythonGo

Company Brief

Chainalysis

Provides blockchain data, analytics, and investigation software to law enforcement, regulators, financial institutions, and crypto businesses to detect illicit activity, ensure compliance, and build trust in digital asset ecosystems.

Industry: RegTech

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series F

Headquarters: New York, United States

Founded: 2014

Glassdoor: 2.8

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Chainalysis

2 months ago

Staff Security Engineer, Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Location: United Kingdom

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Lead Product Security across Chainalysis' SaaS offerings, partnering with product and platform engineering teams on design, code, and remediation
•Own Unified Security Review process for new product launches, vendor evaluations, and AI tooling — including custom penetration tests scoped to each review
•Drive Security Engineering Risk Management Framework, for consistent risk classification and remediation tracking across product
•Lead the Vulnerability Disclosure Program and security bug reporting workflow, from researcher intake through fix
•Drive SOC2 and compliance-related security remediation across product engineering, partnering with R&D leads on architectural fixes

Key Requirements

•8+ years of application security engineering experience.
•Strong production coding ability in at least one of Java (preferred), TypeScript/JavaScript, Python, or Go — enough to perform deep code review, write proof-of-concept exploits, and contribute fixes directly into product repos.
•Building security automation into CI/CD pipelines
•Hands-on penetration testing of production SaaS applications, including custom tests scoped to new product launches
•Threat modeling, secure design reviews, and static/dynamic code analysis across the SDLC

Experience:8+ yearsSaaSCybersecurity

Skills:LeadershipCommunicationProblem-solvingTeamworkCritical thinking

Tech Stack:AWSKubernetesTerraformWizSonarCloudBurpCloudflareGitHubGitHub ActionsArtifactoryJavaJavaScriptPythonGo

Company Brief

Chainalysis

Industry: RegTech

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series F

Headquarters: New York, United States

Founded: 2014

Glassdoor: 2.8

Website LinkedIn Glassdoor