Senior Security Engineer

Lightspark is the easiest, most reliable, enterprise-grade gateway to the Lightning Network, enabling money to move just like bits and bytes do on the Internet. Lightspark services aim to be the fastest, lowest cost, easiest and most reliable way to send and receive payments globally using Lightning. We want to deliver open payments for the Internet at scale and we're laser-focused on solving real problems for our customers with best-in-class innovative software solutions. We aim to help businesses around the world benefit from real time payments and build amazing new experiences for themselves and their customers. Lightspark is headquartered in Los Angeles but serving the world.
We are seeking an experienced and motivated Security Engineer with a focus on code auditing and review, especially in the blockchain and cryptocurrency space, to join our growing team. The Security Engineer will be responsible for identifying, analyzing, and mitigating potential security threats to our engineering processes, products, and infrastructure. The ideal candidate will have a strong background in engineering, security best practices, and a passion for ensuring the safety and security of our systems and data.
WHAT YOU'LL BE DOING:

• Evaluate and analyze the security posture of engineering processes, products, and infrastructure, with a specific focus on code auditing and review, identifying potential vulnerabilities, and recommending appropriate mitigations.
• Conduct security risk assessments and audits, ensuring compliance with industry standards and regulatory requirements, with a focus on code security.
• Partner with Security Engineering leaders in development and delivery of security training and awareness programs for engineering staff, with a focus on secure coding practices and blockchain/crypto security.
• Collaborate with cross-functional teams to design, develop, and implement secure engineering practices and solutions
• Monitor and investigate security incidents, performing root cause analysis and developing remediation plans, with a focus on code vulnerabilities
• Stay current with emerging security threats, technologies, and best practices, making recommendations for continuous improvement of the company's security posture, especially in the blockchain and cryptocurrency space.
• Provide technical guidance and expertise to engineering teams on secure development practices and techniques, with a focus on blockchain/crypto security and code auditing and review.

WHAT WE ARE LOOKING FOR:

• Minimum of 5 years of experience in engineering security, including experience with secure software development, infrastructure security, and risk management, with a strong focus on code auditing and review.
• A CS degree or equivalent is ideal but not required. We appreciate and acknowledge that some of the best talent comes from non-traditional backgrounds, especially in the blockchain and cryptocurrency space.
• Blockchain experience is ideal but not required, with a strong interest in and understanding of blockchain and cryptocurrency technologies.
• Strong understanding of security concepts, principles, and best practices, including secure coding, encryption, authentication, and access control, with a focus on blockchain/crypto security.
• Familiarity with industry standards and frameworks, such as ISO 27001, NIST, or OWASP, with a focus on their application in the blockchain and cryptocurrency space.
• Proficient in at least one programming or scripting language (e.g., Python, Java, C/C++, or similar)
• Knowledge of common security vulnerabilities, attack vectors, and mitigation strategies, with a focus on code vulnerabilities in the blockchain and cryptocurrency space.
• Excellent problem-solving, analytical, and communication skills, with the ability to work effectively in a collaborative team environment
• Certifications such as CISSP, CEH, or other relevant security certifications are preferred, especially with a focus on blockchain/crypto code auditing and review.

Lightspark is on a mission to build an open payment protocol for the Internet at scale and therefore we're committed to creating a more inclusive and diverse workplace to reflect the customers we serve. We welcome interest from individuals of all backgrounds and levels of experience who share our mission. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other applicable legally protected characteristics.