Senior DevSecOps Engineer

Blockaid is redefining trust in blockchain through advanced, integrated security. Our on-chain security platform is trusted by leading Web3 companies—including Coinbase, MetaMask, Uniswap, Backpack, Stellar, and others—to detect, understand, and automatically prevent or minimize the impact of fraud, scams, hacks, and financial threats.

We are backed by top-tier global investors including Sequoia Capital, Ribbit Capital, and Cyberstarts—firms known for supporting the most innovative and influential companies in technology and cybersecurity.

Blockaid is redefining trust in blockchain through advanced, integrated security. Our on-chain security platform is trusted by leading Web3 companies—including Coinbase, MetaMask, Uniswap, Backpack, Stellar, and others—to detect, understand, and automatically prevent or minimize the impact of fraud, scams, hacks, and financial threats.

We are backed by top-tier global investors, including Sequoia Capital, Ribbit Capital, and Cyberstarts—firms known for supporting the most innovative and influential companies in technology and cybersecurity.

We are looking for a highly experienced Senior DevSecOps Engineer to lead the integration of security practices into our development, deployment, and cloud operations workflows. You will be responsible for designing secure CI/CD pipelines, implementing automated security controls, and working closely with engineering, DevOps, and SOC teams to ensure end-to-end security across the organization.

Your Chain of Impact:

• Implement security best practices across cloud infrastructure (AWS/Azure/GCP), Kubernetes, and microservices environments
• Integrate and manage security tools such as SAST, DAST, SCA, container scanning, secrets management, and IaC scanning
• Lead threat modeling, risk analysis, and architecture reviews for infrastructure and deployment systems
• Collaborate with R&D and DevOps to embed security best practices into development and deployment processs.
• Define and maintain security standards, policies, and frameworks (Zero Trust, IAM, network controls, data protection, etc.)
• Oversee integration of security controls, monitoring systems, and automated detection capabilities.
• Partner with SOC teams to enhance detection, response, and incident management workflows.
• Evaluate new security tools and technologies; lead POCs and drive strategic decisions.
  
  

• 5+ years of hands-on experience in DevSecOps, cloud security, or infrastructure security.
• Strong expertise with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, ArgoCD, etc.)
• Proven experience with cloud environments (AWS/Azure/GCP) and Kubernetes orchestration.
• Deep understanding of security principles for containers, microservices, networking, IAM, and encryption.
• Experience working with SOC processes, including logging pipelines, SIEM/SOAR integrations, and incident response.
• Practical knowledge of SAST, DAST, SCA, IaC scanning, secrets management, and runtime protection tools.
• Familiarity with frameworks such as NIST, CIS, MITRE ATT&CK, and cloud security benchmarks.
• Ability to collaborate with cross-functional teams and communicate complex concepts clearly.