Staff Security Engineer, Product Security
Chainalysis3 months ago
Responsibilities
- Lead product security across Chainalysis SaaS offerings in partnership with product and platform engineering teams.
- Own security reviews for product launches, vendor evaluations, and AI tooling, including custom penetration tests.
- Drive the Security Engineering Risk Management Framework and remediation tracking across product.
- Lead the Vulnerability Disclosure Program and security bug reporting workflow from researcher intake through resolution.
- Drive SOC2 and compliance-related security remediation with R&D leads.
- Provide security reviews and guardrails for internal AI platforms and coding agents.
- Participate in a shared on-call rotation for high-severity production security incidents.
Requirements
- 8+ years of application security engineering experience.
- Strong production coding ability in at least one of Java, TypeScript/JavaScript, Python, or Go.
- Experience building security automation into CI/CD pipelines.
- Hands-on penetration testing of production SaaS applications and new product launches.
- Experience with threat modeling, secure design reviews, and static/dynamic code analysis across the SDLC.
- Experience identifying and remediating common web application vulnerabilities, including the OWASP Top 10.
- Experience securing internal AI/LLM platforms and coding agents, including model gateways, prompt/response controls, and agent permissioning.
- Preferred experience in Web3, blockchain, or digital assets.
- Preferred experience building AI workflows, agents, and guardrailing.
Tech Stack
Categories
About Chainalysis
Chainalysis offers cryptocurrency investigation and compliance solutions to global law enforcement agencies, regulators, and businesses as they work together to fight illicit cryptocurrency activity. Backed by Benchmark and other leading names in venture capital, Chainalysis builds trust in blockchains. For more information, visit: www.chainalysis.com