Principal Security Engineer, Security

Circle is a financial technology company at the epicenter of the emerging internet of money, where value can finally travel like other digital data — globally, nearly instantly and less expensively than legacy settlement systems. This ground-breaking new internet layer opens up previously unimaginable possibilities for payments, commerce and markets that can help raise global economic prosperity and enhance inclusion. Our infrastructure – including USDC, a blockchain-based dollar – helps businesses, institutions and developers harness these breakthroughs and capitalize on this major turning point in the evolution of money and technology.

What you’ll be part of:

Circle is committed to visibility and stability in everything we do. As we grow as an organization, we're expanding into some of the world's strongest jurisdictions. Speed and efficiency are motivators for our success and our employees live by our company values: Multistakeholder, Mindfulness, Driven by Excellence and High Integrity. Circlers are consistently evolving in a remote world where strength in numbers fuels team success. We have built a flexible and diverse work environment where new ideas are encouraged and everyone is a stakeholder.

What you’ll be responsible for:

Circle is looking for a passionate Principal Security Engineer with an expertise in Product and BlockChain Security to help drive and implement technical strategies, innovative tooling, research, and processes. You’ll be part of the overall Security Engineering team and closely partner with the Engineering, Infrastructure, and IT teams responsible for supporting our cloud operations, software development, fleet of devices and endpoints.

What you'll work on:

• Work with the product management and software engineering teams during all phases of the SDLC to ensure that applications are designed and implemented securely
• Test web3 and web2 applications and underlying systems for vulnerabilities using both tools and manual techniques; manage the remediation of findings through resolution
• Recommend code changes to eliminate vulnerabilities
• Automate security tests within the CI/CD pipeline
• Help develop secure coding standards and training materials based on findings seen in Circle’s environment to empower engineers to write more secure code
• Research vulnerabilities specific to blockchain technologies and incorporate this knowledge in Circle’s security practices
• Serve as an escalation point to investigate security alerts and identify incidents
• Investigate vulnerability reports related to Circle products and systems
• Manage vendors to conduct penetration tests and other security-related projects
• Influence the continuous improvement of the application …