United States onlyWho We Are:
At Galaxy we are building products and services to help the world invest in economic progress. We believe crypto and blockchain innovations will permeate and improve all aspects of our global economy. Our vision is a society where value and ownership flow as freely as information. Galaxy is a digital asset and blockchain leader helping institutions, startups, and individuals access and navigate the crypto economy. As one of the most well-capitalized and trusted companies in the industry, we provide platform solutions custom-made for a digitally native ecosystem across three complementary operating businesses: Global Markets, Asset Management, and Digital Infrastructure Solutions. Our offerings include, amongst others, trading, lending, strategic advisory services, institutional-grade investment solutions across passive, active and venture strategies, proprietary bitcoin mining and hosting services, network validator services, and the development of enterprise custodial technology. Galaxy’s CEO and Founder Michael Novogratz leads a team of crypto enthusiasts, and institutional veterans focused on the future of finance and Web3. The Company is headquartered in New York City, with global offices across North America, Europe and Asia.
Additional information about the Company's businesses and products is available on www.galaxy.com.
What We Value:
We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be.
- Seek Excellence.
- Be Selective To Be Effective.
- Be Highly Aligned, Loosely Coupled.
- Disagree Transparently.
- Encourage Independent Decision-Making.
- Build Dream Teams.
Who You Are:
Working in tight collaboration with the on-chain business teams, the blockchain security engineer will assess the security of the various architectures involved in on-chain projects and require appropriate controls to reach an acceptable level of risk. The assessment will consists of activities such as: threat modeling, code review, security testing, cloud/server posture assessment.
As a member of the product security team, the engineer will be able to collaborate with team members to improve the existing blockchain assessment model.
We are open to candidates having limited exposure on blockchain technologies who would show a strong interest in learning. It is key that the candidate has programming experience in an enterprise setting in order to review complex code artifacts and implement some of the required security controls.
What You’ll Do:
- Perform security activities for new projects and updates to existing projects of the on-chain business team
- Enhance the existing blockchain assessment model, with guidance from the existing product security engineers
- Research key aspects of the various blockchains used by the on-chain business team
- Security-oriented code review, enhanced with automated security scanning tools (SAST) E.g. review Rust server, Solana smart contract, Solidity smart contract
- Implement some of the security controls required by the assessment, when such control can be reused across architectures
- Knowledge of security best practices, including encryption, access control, OWASP top 10, and network security
What We’re Looking For:
- Bachelor's degree in Engineering, Computer Science, or a related field.
- A minimum of 6 years of experience in technology or IT/Security department
- At least 3 years of hands-on programming experience in languages such as Python, Rust, Go or similar
- Strong knowledge of secure software development lifecycle (SDLC) practices.
- Demonstrated experience in building and shipping software in modern/microservices architectures
- Knowledge of blockchain technology
- In depth understanding of at least a few of the following topics: authentication and authorization technology, TLS and PKI, network security, cloud security, system security, application security
- Possession of a recognized security of cloud certifications
- Excellent problem-solving skills and attention to detail
- Strong communication skills
- Ability to work collaboratively in a fast-paced, dynamic environment
Bonus Points:
- Experience with digital asset custody solutions and security best practices
- Familiarity with additional blockchains (Cosmos et al) and layer2 strategies (Eigen), and/or other web3/blockchain ecosystems.
What We Offer:
- Competitive base salary and bonus
- Flexible Time Off (paid)
- 3% 401(k) company contribution
- Company-paid health and protective benefits for employees, partners, and other dependents
- Generous paid Parental Leave
- Free virtual coaching and counseling sessions through Ginger
- Opportunities to learn about the Crypto industry
- Free daily snacks in-office
- Smart, entrepreneurial, and fun colleagues
- Employee Resource Groups
*Benefits may vary depending on location.
Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances.
We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact [email protected].
