Security Engineer

Security Engineer
Remote (US)
Security
Remote
Full-time

About the company

Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We were the first company to tokenize exposure to US Treasuries, and have since expanded into several other assets. We are also focused on incubating protocols that can support both tokenized real-world assets and traditional crypto.

Founded by folks from Goldman Sachs Digital Assets Team, we’re backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S.

About the role

As a Security Engineer at Ondo Finance, you will help secure our blockchain-based financial products and infrastructure. You’ll work with senior engineers to execute security architecture reviews, implement controls for both on-chain and off-chain systems, and support secure delivery as we scale. Working closely with product and engineering teams, you’ll help build and maintain secure systems that protect digital assets and sensitive customer and company data.Target Outcomes

• Improve the security posture of Ondo's on-chain and off-chain systems through practical, high-impact controls
• Identify, triage, and help remediate vulnerabilities across smart contracts, services, and infrastructure
• Contribute to security standards and documentation that make secure development the default
• Help the team respond effectively to security incidents through solid detection, runbooks, and follow-through

Responsibilities

• Support security architecture reviews for blockchain products, focusing on smart contract security, key management, and Web3 integrations
• Implement and iterate on security controls for both on-chain and off-chain systems
• Perform security assessments of smart contracts and blockchain infrastructure (manual review and tooling-assisted)
• Participate in on-call rotation and incident response support as needed
• Partner with engineering teams to integrate security best practices into the development lifecycle (threat modeling, secure design reviews, pre-release checks)
• Support third-party security assessments and coordination with external auditors
• Help maintain security documentation, runbooks, and training materials

Requirements

• 3+ years of experience in security engineering or adjacent infrastructure/software engineering with a strong security focus
• Working understanding of cryptography and blockchain security principles
• Experience assessing and securing smart contracts and/or DeFi protocols (professional experience or meaningful open-source contributions)
• Familiarity with security fundamentals for distributed systems (authn/authz, secrets management, network segmentation, logging/monitoring)
• Exposure to incident response and security monitoring workflows
• Ability to read code to identify and assess security risks; ability to write code in common scripting languages to support security solutions and automation
• Strong communication skills with both technical and non-technical stakeholders

Nice to haves

• Experience with Solidity, Rust-Solana, Move, or Go
• Background in traditional finance or FinTech security
• Experience with formal verification and automated security testing
• Knowledge of cross-chain bridges and interoperability protocols
• Experience improving CI/CD security for smart contract deployment
• Experience with multi-signature systems and custody solutions

What we offer• Competitive compensation including salary, future token rights, and/or equity (according to your preferences) — we're well-funded and believe that great talent deserves great compensation• Full benefits (medical, vision, and dental) and flexible vacation policy (PTO)• Small remote-first team across many countries — you'll be an early team member helping shape our vision, culture, and design practices• A+ colleagues — our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, Pinterest, McKinsey, Circle, Uniswap, Phantom• Best-in-class investors — we are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase VenturesReady to apply?Powered byFirst name*Last name*Email*LinkedIn URLResume*Click to upload or drag and drop hereAre you currently authorized to work in the United States without the need for employer sponsorship?YesNoWill you now or in the future require sponsorship for employment visa status in the United States?