Senior Security Engineer (Remote)

CoinTracker makes cryptocurrency portfolio tracking and tax compliance simple. Beyond cryptocurrency, we are building a general automated financial assistant for all financial assets. Our mission is to increase the financial freedom and prosperity of the world.

Some things we’re proud of:

Building foundational tools in the cryptocurrency space

$50B+ in cryptocurrency is tracked on CoinTracker – over 5% of the entire crypto market

1M tax forms filed

Partnered with Coinbase, Uniswap, OpenSea, eToro, H&R Block and other industry leaders

Venture-backed by Accel, General Catalyst, Y Combinator, Initialized Capital, Coinbase Ventures, Kraken Ventures, Intuit Ventures, 776 Ventures, Balaji Srinivasan, Claire Hughes Johnson, Gokul Rajaram, Ryan Shea, Serena Williams, Zach Perret, and others

Founders: Jon previously built TextNow (200M downloads), Chandan was previously a product manager at Google & Google[x]

Learn more about our mission, culture, and hiring process.

Your opportunity:

Join our tight-knit early-stage distributed team that thrives on interesting technical challenges and building magical products that improve people's lives. As our first Security Engineer, you will lead the charge to ensure CoinTracker has best in class security across our infrastructure and products.

You will:

• Audit our system end-to-end to identify security risks

• Design and implement changes to address security risks

• Partner with engineers on projects and pull requests with security implications to improve security posture

• Manage ongoing blackbox security testing with external vendors

• Create or implement the security resources necessary to meet your goals within the cloud

• Help with compliance efforts like SOC2

• Help interview new engineers

You may enjoy this role if you:

• Are passionate about building best-in-class security systems

• Familiar with security testing practices and tools relevant for a modern software stack dealing with consumer data

• Stay up to date with latest trends and security vulnerability reports and help us update our software as needed

• Have experience scaling Security Engineering needs of a startup to a mid-size company

• You come from a cloud native background

Sample projects you might work on:

• Cross-platform OAuth authentication for the CoinTracker application

• Application vulnerability scanning as part of the code release process

• RBAC infrastructure access for employees

• Security hardening of cloud estate

• SIEM selection and implementation

Some of the skills we’re excited about

• 5+ year of Security Engineering specific experience

• 5+ years of software development experience

• Productive, resourceful, and effective at problem-solving

• Drawn to an early-stage, high-growth startup environment with less stability and more ambiguity

• Strong fundamentals with a cloud platform like GCP or AWS

• Interested in financial products and/or cryptocurrency

• Able to work effectively in a remote setting and able to overlap with our core hours of 9 AM to 12 PM PT

Our engineering process includes

• Code reviews

• Continuous integration

• Multiple daily automated deployments to production

• Automated testing with >85% code coverage

Some of the technical challenges we face are

• Lots of data — billions of data points to track transactions and market pair prices

• Data structures & algorithms — automated transfer detection, cost basis tracking, tax optimization, and more. Your CS fundamentals finally come in handy!

• Scalability — some cryptocurrency users, such as algorithmic traders, accumulate millions of transactions per year. CoinTracker needs to work seamlessly for those power crypto traders.

• Blockchain — whether it's running our own nodes, implementing xPub address generation and traversal, or parsing smart contracts to seamlessly support decentralized trading, we get our hands dirty with core blockchain technology

• Technical complexity — integrating with hundreds of exchanges and blockchains and supporting thousands of cryptocurrencies means we have to methodically architect our software and build critical monitoring systems to deliver a robust and accurate platform

• Product challenges — building a consumer finance product that works flawlessly for our global user base and through our partner integrations with top crypto exchanges, marketplaces, and tax-filing software

Our tech stack is

• Web: HTML, Typescript, React, React Native, Styled-Components

• Mobile: React Native, Expo, GraphQL

• Backend: Python, Flask, GraphQL, Postgres, BigTable, Redis, Python RQ

• Infrastructure: GCP, Terraform, PostgreSQL, Docker, Pub/Sub, Datadog, PagerDuty

• You don’t need to know any or all of these, but be willing to learn!

What's it like working at CoinTracker?

We are a fully internationally distributed, tight-knit team. We have minimal process, and the majority of our time is spent working and collaborating asynchronously through tools like Figma, Github, Google Meet, Linear, Notion, Slack, Zendesk. We also stay aligned and bonded through weekly sprints, standups, all hands, and socials. We aim to empower every individual on the team with full transparency, ownership, autonomy, and clear objectives. Learn more about our guiding principles.

If this sounds exciting, we'd love to hear from you! Not sure you’re a perfect fit? Reach out anyway. We’re looking for awesome individuals, not folks who perfectly match a job posting.