📋
Description
- Provable is seeking a Security Engineer to manage and secure our technology infrastructure, focusing on cryptocurrency private keys, GCP practices, and system administration. The ideal candidate will be a proactive problem-solver with a passion for leveraging security practices to drive efficiency and innovation within a fast-paced startup environment.
- Responsibilities include managing cryptocurrency private keys, implementing policies for key storage and access, securing GCP infrastructure, performing security audits, setting up MFA, monitoring security incidents, conducting vulnerability assessments, system administration, participating in on-call rotations, developing security policies, and conducting staff training.
- Qualifications include a Bachelor's degree in Computer Science, Information Security, or related field; 3+ years of security engineering experience; proficiency in managing cryptocurrency keys, GCP security, system administration (Linux/Unix), MFA, security frameworks (NIST, ISO 27001), scripting, and familiarity with security tools and certifications. Strong analytical, communication, and proactive security skills are required.
- Preferred qualifications involve certifications related to GCP, Security, Networking, experience with blockchain/cryptocurrency projects, secure software development, containerization (Docker, Kubernetes), automation scripting, and frameworks like Zero Trust, SASE, and industry standards (FedRAMP, NIST, SOC 2, GDPR).
🎯
Requirements
- Bachelor's degree in Computer Science, Information Security, or a related field.
- 3+ years of experience in security engineering.
- Proficiency in managing cryptocurrency private keys and secure key management practices.
- Strong knowledge of GCP security best practices.
- Experience with system administration (Linux/Unix) and MFA implementation.
- Knowledge of security frameworks and standards (e.g., NIST, ISO 27001).
- Experience with scripting for process automation and security enhancement.
- Proficiency with Linux (CentOS, Red Hat, Ubuntu, Kali), Windows, macOS, and cloud platforms (GCP, AWS, Azure).
- Familiarity with security tools such as BeyondTrust, Burp Suite, Elastic SIEM, Metasploit, Nessus, Nmap, OpenVAS, OSINT, PKI, QRadar, Splunk, Tanium, VMware Carbon Black, and Wireshark.
- Certifications such as ATT&CK Cyber Threat Intelligence, AWS Cloud Practitioner, Infosec Threat Hunting Professional, Microsoft Azure Fundamentals, Network+, Security+, VMware Carbon Black App Control Associate.
- Exceptional analytical and problem-solving skills.
- Strong communication and documentation skills.
- Ability to work independently and in a team-oriented environment.
- Attention to detail and a proactive approach to security.
- Willingness to learn.
🏖️
Benefits
- Monthly budget for expenses relating to working in a remote environment (home office setup & supplies, transportation, fitness & personal well-being, continued learning, etc.).
- Comprehensive, top-tier healthcare coverage.
- Flexible vacation policy.
- Ability to attend major industry conferences and global events at the company’s expense.
- Regular team off-sites and retreats.