Security Engineer, Privy

About the Role

As a Security Engineer at Privy, you will contribute to keeping a rapidly growing platform secure through hands-on investigation, operational ownership, and building code to solve problems. You will work across security operations, incident response, application and infrastructure security, and internal tooling. This role involves ownership of daily tasks that protect Privy, including investigating anomalies, improving security workflows, and building automation. You will collaborate with engineers across Privy and specialists in cryptography, application security, offensive security, and infrastructure security.

Key Responsibilities

• Own security engineering work end-to-end: investigate alerts, findings, anomalies, and security requests; identify root causes; drive remediation; and document outcomes.
• Participate in Privy’s security on-call rotation, responding to incidents, triaging alerts, supporting vulnerability workflows, completing access reviews, and handling security escalations.
• Build and maintain production-quality tooling to reduce manual work, including alert enrichment, automated triage and routing, remediation workflows, access-review automation, and detection improvements.
• Lead focused investigations into suspected security events or compromises, gathering evidence and coordinating response.
• Proactively identify recurring sources of operational toil and engineer solutions to improve team speed, consistency, and scalability.
• Partner with product and engineering teams to assess security risks, review designs and implementation plans, and make security tradeoffs to deliver quickly with quality.
• Contribute across Privy’s application, infrastructure, cloud, and product-security surface area, building broad context and deeper expertise.

Requirements & Tech Stack

• Node, React, and AWS are used to focus engineering energy on Privy's core product.

Qualifications

Minimum Requirements

• Experience as a security engineer, detection engineer, or similarly hands-on engineer in a technically demanding environment.
• Strong software-engineering skills in Python, Go, Ruby, or a similar language. Ability to build maintainable tooling and contribute to production fixes.
• Experience investigating security signals, incidents, vulnerabilities, suspicious activity, or other ambiguous technical problems through to resolution.
• Familiarity with security operations, incident response, vulnerability management, detection engineering, access reviews, or related operational-security workflows.
• Strong understanding of web, browser, infrastructure, or cloud security.
• Good judgment under pressure, a methodical approach to investigation, and comfort working independently with agency despite incomplete information.
• Strong communication and collaboration skills, including the ability to explain technical findings, risks, and recommended actions clearly.
• A self-directed approach to work: noticing gaps, making progress through ambiguity, and reliably closing the loop.

Preferred Qualifications

• Experience with AWS, GCP, or other cloud-security environments.
• Experience with detection engineering, security automation, incident-response tooling, or remediation pipelines.
• Bug-bounty experience, offensive-security exposure, or a strong attacker-minded approach to investigation.
• Experience with IAM, secrets management, secure production access, or secure CI/CD.
• Background in application security, infrastructure security, cryptography, or privacy engineering.
• Experience with fintech, payments, blockchain, or another diligence-forward financial product domain.
• Experience helping shape security operations, incident-response practices, vulnerability-management workflows, or a bug-bounty program.