The Internet Computer is the fastest and only infinitely scalable general-purpose blockchain — incubated and launched by the DFINITY Foundation in May 2021. A team of over 200 world-renowned cryptographers, distributed systems engineers, and programming language experts have taken on the massive technological challenge of building, maintaining, and continuously improving a 'world computer' powerful enough to host Web3 dApps, DeFi, games, NFTs, social media, and metaverse projects.
DFINITY was founded in 2016 by entrepreneur and crypto theoretician, Dominic Williams, and attracted interest and financial contributions from early members of the Ethereum community. Later, top-tier institutions such as Andreessen Horowitz, Polychain Capital, and SV Angel backed the Internet Computer in a collective effort to help build out Web3.
At DFINITY we're building a world class Security team which re-defines Information Security as we know it. This requires a bias towards building solutions that are secure by default, use defense in depth and enhance user experience. This role, within the Infrastructure Security team, is for a Security Engineer looking to achieve such a vision.
- Develop a proactive vulnerability and patch-management solution, showcasing a clear risk state of the infrastructure due to out-of-date software/hardware.
- Secure remote access with MFA, robust account management, state of the art monitoring, and alerting.
- Utilize Infrastructure management tooling (Puppet, Chef, TF, Ansible) for consistent hardening configurations such as CIS benchmarks across cloud and on-prem infrastructure.
- Craft a strategy with tooling for security of SaaS solutions such as GSuite, Slack etc. deployed across the organization.
- Develop a third party vendor review process for risk assessment and decision making.
- 1-5 years of hands-on experience as a Security Engineer, DevSecOps, or DevOps with security mindset and strong interest in security
- BS or MS in Computer Science or a related field is preferred
- Practical and pragmatic approach
- Infrastructure as Code mentality
- Familiarity with DevSecOps toolchain (eg: Chef, Ansible, Terraform, Puppet, Jenkins etc).
- Ability to develop tools using programming languages such as Ruby, Python etc.
- Familiarity with blockchain and cryptocurrency technologies is a bonus
- Experience with one or more of the following is a plus:
- OS internals and security hardening (MacOS, Linux, Windows)
- Hardening of networking devices, protocols and solutions
- Security of Cloud Infrastructure platforms
- Account lifecycle management, Multi-factor authentication, authentication and authorization protocols and solutions
- Vulnerability and patch management, secure configuration deployment
All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.