VP, Blockchain Security Engineer

As a VP, Blockchain Security Engineer at Galaxy, your main responsibilities include conducting thorough security assessments for various blockchain architectures, performing code reviews, security testing, and implementing necessary security controls. You’ll work closely with on-chain business teams to ensure that all projects and updates meet the highest standards of security.

To qualify for the VP, Blockchain Security Engineer role at Galaxy, candidates should hold a Bachelor's degree in Engineering, Computer Science, or a related field, along with at least 6 years of experience in technology or IT/Security. Additionally, a minimum of 3 years of hands-on programming experience in languages such as Python, Rust, or Go is required, along with strong knowledge of secure software development lifecycle practices.

In the role of VP, Blockchain Security Engineer at Galaxy, you will significantly contribute to product security by enhancing the existing blockchain assessment model, researching critical aspects of the various blockchains used, and collaborating with the product security team to implement security best practices and controls across on-chain projects.

Essential programming skills for the VP, Blockchain Security Engineer role at Galaxy include proficiency in languages like Python, Rust, or Go. These skills will enable you to conduct effective code reviews and develop security controls essential for safeguarding our blockchain projects.

The work culture at Galaxy for the VP, Blockchain Security Engineer is dynamic and collaborative, emphasizing excellence and transparency. You will find a team of diverse thinkers and high achievers, all committed to energizing the global economy through blockchain innovations. The environment encourages independent decision-making, problem-solving, and continuous learning.

Discuss your previous roles where you were involved in conducting security assessments. Highlight specific methodologies like threat modeling you used and any frameworks you rely on, and how they contributed to ensuring the integrity of past projects.

Share details about the programming languages you excel at, such as Python or Rust. Provide examples of projects where you wrote secure code, conducted code reviews, or developed security tools that illustrate your application of these languages in real-world scenarios.

Explain the resources you use, such as industry reports, newsletters, or conferences. Mention any communities you’re part of and how you leverage these to enhance your knowledge and skills in blockchain security.

Outline the security review process you adhere to, including code review checklists, automated tools you employ, and manual review techniques. Discuss the principles you apply to ensure robust security in new code submissions.

Talk about any tools you have extensive experience with, such as SAST or other automated scanning software, and how you integrate these tools into your security review procedures to catch vulnerabilities early in the development cycle.

Discuss your approach to assessing the current model and identifying areas for improvement, leveraging feedback loops from team members and integrating best practices you have learned over your career.

Identify major challenges such as scalability, attack vectors, or regulatory compliance. Discuss how you address these challenges in your role and share any experiences you have had mitigating similar risks.

Emphasize your understanding of cloud infrastructure security, including TLS, PKI, and access controls, and how these practices are vital when incorporating blockchain solutions within cloud environments.

Share a specific example of a security incident—what the issue was, how you identified it, the steps you took to resolve it, and the end result. It’s a great way to showcase your problem-solving and critical-thinking skills.

Discuss your time management strategies, how you assess urgency and importance, and your ability to pivot when needed. Provide examples of past experiences where effective prioritization led to successful project outcomes.