3 days ago
Remote, United StatesMid Level
H1B sponsor
Responsibilities
- Implement least-privilege access, phishing-resistant authentication, short-lived credentials, privileged-access controls, provisioning and deprovisioning, cloud configuration improvements, credential storage, network protections, and secrets scanning.
- Secure AI agents, coding assistants, developer tools, MCP integrations, and tool execution through permissions, isolation, network restrictions, audit trails, and safeguards against prompt injection, tool misuse, and unintended data access.
- Build detection and response capabilities using identity, cloud, workload, and CI/CD telemetry; investigate attacks, reduce alert noise, test response procedures, revoke sessions, rotate exposed credentials, and remove unauthorized access.
- Assess software dependencies, CI/CD workflows, third-party integrations, and developer environments to reduce software supply-chain risk and remediate vulnerabilities.
- Monitor internet-facing services, assess vulnerabilities and active exploitation, and coordinate patching, isolation, credential revocation, or compensating controls with service owners.
- Automate and document access reviews, configuration checks, evidence collection, remediation tracking, and security workflows using code and APIs.
- Maintain endpoint protections and device-security baselines, support identity and SaaS controls, provide technical evidence for audits and customer reviews, and maintain runbooks.
Requirements
- Typically 4+ years of relevant security, infrastructure, or software engineering experience with direct responsibility for implementing security controls.
- Hands-on experience with a major cloud platform and a strong foundation in identity, networking, operating systems, and access control.
- Depth in at least two areas such as cloud security, detection and response, application security, vulnerability management, or corporate security.
- Experience investigating technical problems from logs and system behavior, testing hypotheses, and following issues through resolution.
- Clear communication, practical judgment, and constructive working relationships with engineering and business teams.
Benefits
- Medical, dental, vision, life, and AD&D insurance; US employees receive 100% coverage for Gold plans and 80% coverage for dependents.
- Meaningful early-stage equity through a stock option grant for every full-time employee.
- Flexible, trust-based paid time off that meets or exceeds local statutory vacation requirements in each hiring country.
- Company-sponsored US 401(k) plan.
- The posting states that applicants from all backgrounds are welcome and that the company hires in multiple countries.
Categories
About Allium
Allium builds on-chain data infrastructure for finance, engineering, and strategy teams, delivering SQL-queryable datasets, managed blockchain databases, APIs, datashares, streams, and real-time alerts. It ingests, verifies, and standardizes data across 140+ blockchains and tens of petabytes to power reporting, reconciliation, risk monitoring, and production apps. Founded in 2021 and headquartered in New York, it operates as a privately held company selling enterprise subscriptions and managed data services.