Lead DevSecOps

Paxful is a leading peer-to-peer crypto exchange. Our mission is social justice through financial freedom worldwide. By offering a platform with over 300 financial networks that empowers both merchants and buyers alike, we have created opportunities for millions across the globe who don’t have access to traditional banking services.

As a Lead DevSecOps Engineer at Paxful, you will be at the forefront of establishing, maintaining, and elevating our security standards and practices. This is a key leadership role in which you will help shape the company's future in the fast-evolving fintech/crypto world, taking on the challenges of a rapidly scaling the global business.

The company offers fully-remote work from anywhere with core company hours centered around the GMT+2 time zone.

You will have the opportunity to work with crypto and high-reliability systems, as well as collaborate with world-class tech talent. No crypto experience is required. Ability to communicate in English is essential.

Your responsibilities will include:

– Strategy & Leadership: You will design, implement, and manage our DevSecOps strategy. This includes coaching and mentoring junior team members, leading projects, and facilitating collaboration between our dedicated development and security teams.

– Security Architecture Design: You will develop secure infrastructure designs and enhancements that align with modern cloud security principles, primarily within an AWS environment.

– Automated Security Controls: You will implement, maintain, and improve security controls within our CI/CD pipeline, incorporating automated scripts and tools for server setup, vulnerability scanning, and code quality checks.

– Vulnerability Management: You will conduct regular vulnerability assessments, risk assessments, and penetration testing on all applications and systems, ensuring prompt remediation of any identified vulnerabilities.

– Incident Response Management: In the event of a security breach, you will lead the response, including remediation efforts, incident analysis, and necessary communication or reporting.

– Compliance Monitoring: You will ensure Paxful's compliance with relevant industry regulations, involving regular auditing and the development of compliance-related tools and procedures.

– Secure Code Practices: You will promote secure coding practices within the organization, including developer training and code reviews for security vulnerabilities.

– Infrastructure Monitoring: You will establish a robust monitoring and logging system that can detect and alert on suspicious activity or performance issues, leveraging AWS services as necessary.

– Vendor Management: You will manage relationships with third-party vendors involved in Paxful's security posture, ensuring their products or services align with our security policies and requirements.

– Policy & Procedure Development: You will assist in the development and maintenance of security policies, procedures, and standards, ensuring they are up-to-date and adhere to the best practices in our industry.

Сфера деятельности:

Интернет-компания (поисковики, платежные системы, соц.сети, информационно-познавательные и развлекательные ресурсы, продвижение сайтов и прочее), Разработка программного обеспечения