Member of Technical Staff, PlatSec - Security Engineering
Anchorage Digital
Technical Skills:
- Build secure, resilient, and global infrastructure from the ground up!
- Review code across the entire stack and engineering organization while actively participating in product development.
- Foster an efficient deterministic testing culture, with an emphasis on minimizing tech debt and bureaucracy.
Complexity and Impact of Work:
- Face challenges and exercise judgment in enabling controls, ensuring that Anchorage Digital maintains a risk-based prioritization of the scanning, alerting, and automated remediation.
- Review and evaluates results of incident post-mortems and security investigations to evolve the footprint of our security monitoring and ensure that it remains appropriate as the company scales in size and complexity.
- Determines methods and procedures on security monitoring and operations, while successfully navigating roadblocks and obstacles that may come up, and escalating when blocked.
- Drive work independently, lead or significantly contribute to medium-to-large Security Team initiatives. These are usually multi-person projects that may cross engineering team boundaries, including leading from end-to-end with little oversight and coordinating activities of other team members.
- Break down large projects into smaller tasks, and accurately estimate the time and scope of projects and effectively articulate the different options considered, analyze trade-offs, and justify and recommend priorities.
- May be accountable for delivering tactical investigations or client responses that support Anchorage Digital’s business relationships.
- Be a contributor of high quality code and infrastructure who makes impactful technical contributions to our platform, and monitors technical debt and opportunities for improvement.
Organizational Knowledge:
- Be aware of the company’s strategy to guarantee its successful implementation and be involved considered in the planning and definition of strategic goals of the Security Team.
- Monitor the development of the company objectives and/or trends that may affect its capacity to succeed.
- Deeply consider security across the entire product ecosystem and help create a company culture that does as well.
- Find the right balance between progress (i.e. shipping quickly) and perfection (i.e. measuring twice).
- Help scale the team.
Communication and Influence:
- Ensure that knowledge is shared among the team. This includes shadowing other members of the Security Team to ensure you can assist if they are unavailable.
- Mentor and guide multiple engineers on the Engineering team and help others understand the Anchorage Digital’s strategic goals, empowering other engineers to safely develop new technologies and services with proper oversight and assurance.
- Cross direct team and service boundaries to solve problems, including reviewing specs published by other teams, and participating in technical discussions.
- Effectively communicate insights, recommendations, conclusions and ideas on how to improve the team (e.g. process, technical backlog, etc.).
- Understand context or underlying needs, motivations, emotions and concerns of others and adjust communication to ensure maximum impact and effectiveness.
You may be a fit for this role, if you have:
- You have extensive knowledge of information security, cloud computing, and security monitoring and serves as an internal knowledge resource for this expertise.
- You have a wide-ranging experience, uses indepth professional concepts, knowledge, insights and company’s objectives to triage, investigate, and resolve security issues across multiple environments and axes; e.g. scale, uncertainty, interconnectedness.
- You have real world experience shipping product and implementing secure frameworks, libraries, and services.
- You have a deep understanding of common crypto protocols (TLS, GPG, SSH, etc.), code signing, networks security, authentication/authorization, and the threat landscape for state-of-the-art attacks.
- You have experience developing threat models and conducting incident response/forensics.
- You genuinely care about code quality and test infrastructure.
- You prioritize end-user experience and business value over “cool tech.”
- You have developed “computer science fundamentals”, i.e. concurrency, algorithms, and data structures (Formal CS degree NOT required).
- You self-describe as some combination of the following: creative, humble, ambitious, detail-oriented, hardworking, trustworthy, eager to learn, methodical, action-oriented, and tenacious.
Although not a requirement, bonus points if:
- In your mind the word “crypto” stands for cryptography, not cryptocurrency.
- You read blockchain protocol white papers for fun, and stay up to date with the proliferation of cryptoasset innovations.
- You have a background in the finance industry.
- You were emotionally moved by the soundtrack to Hamilton, which chronicles the founding of a new financial system. :)