Senior Security Engineer

Job Application for Senior Security Engineer at Nansen.ai Senior Security Engineer Remote Europe | Remote Asia Apply Talent Wanted. For hazardous journey. Small wages , bitter cold, long months of complete darkness, constant danger, safe return doubtful. Honour and recognition in case of success. Fridtjof Nansen crossed the Arctic, going places no human had ever been. Together with our users, we're doing the same onchain — and someone needs to make sure we don't get killed on the way there. Nansen is a special company. We're building the single best platform for onchain investing — agentic trading, staking infrastructure, AI-powered analytics — and we're scaling fast. Fast enough that security can't be an afterthought bolted on later. It has to be built in, from the start, by someone who knows what they're doing. Our mission: Surface the signal and create winners. What you'll do at Nansen You'll be the person who makes sure we can move fast without breaking things that matter. That means embedding security into everything we build — cloud infrastructure, applications, CI/CD pipelines, AI systems, staking operations — across a generalist role that spans the full surface area. Run security assessments across systems, architectures, and code — find the vulnerabilities before someone else does Advise engineering teams on secure design decisions. You're a partner, not a blocker Deploy and maintain security infrastructure: SIEM, vulnerability scanning, endpoint protection, logging — the things that let us sleep at night Secure our CI/CD pipelines and deployment workflows end-to-end Own secrets management, key management, and access controls. No shortcuts Address LLM security head-on: API key management, prompt injection prevention, and the risks that come with shipping AI-powered products at speed Coordinate penetration tests and security audits with external vendors Create and maintain secure coding guidelines and code review processes that engineers actually follow Represent the Security Team in the incident response process Drive compliance readiness — SOC 2, ISO 27001 — pragmatically, not bureaucratically What we're looking for You've built and hardened production security at scale — you know the difference between a policy document and an actually secure system Strong cloud security knowledge (AWS, GCP or equivalent). Container security and network security fundamentals Hands-on experience implementing security tooling, not just evaluating it Secrets and key management expertise — you've managed this at a company where it actually mattered You understand the security implications of AI/LLM and agent-based systems. This is new territory and we need someone thinking about it seriously CI/CD pipeline security is second nature Pragmatic about compliance — you can get us to SOC 2 without drowning the engineering team in process You don't just use AI as a tool. You think with it. AI-first isn't a checkbox — it's how you work Strong async communication skills — we're remote-first, Slack-and-docs-heavy, and EMEA hours are preferred for team overlap Bonus: blockchain, smart contract, or staking infrastructure security experience. Kubernetes and Terraform security. Incident response or security operations background What we offer our crew Competitive salary. Meaningful equity. Real ownership in what you build Fully remote with two no-meeting days a week — because deep work doesn't happen in a Google Meet Annual company retreat and team off-sites in one of our offices: Singapore, Bangkok, London, and Oslo — flights and accommodation covered Unlimited AI tokens — Claude, OpenAI, whatever helps you move fast Your own OpenClaw for work Nansen Pro account: giving you full access to the most detailed onchain data in the market A team that started as data engineers and data scientists that has grown to over 80 builders. Your craft is respected here. Speed, ownership, curiosity, courage. These aren't values on a wall — they're how we run. A front-row seat (and a hand in building) the next chapter of finance Work visa sponsorship is not provided for this role. Safe return doubtful. Honour and recognition in case of success. Create a Job Alert Interested in building your career at Nansen.ai? Get future opportunities sent straight to your email. Create alert Apply for this job * indicates a required field Autofill with MyGreenhouse First Name * Last Name * Email * Phone Country Phone Resume/CV Attach Attach Dropbox Google Drive Enter manually Enter manually Accepted file types: pdf, doc, docx, txt, rtf Cover Letter Attach Attach Dropbox Google Drive Enter manually Enter manually Accepted file types: pdf, doc, docx, txt, rtf LinkedIn Profile Website What security risks do you see in adopting internal LLM tools across engineering teams, and how would you mitigate them? * What interests you about Nansen? * Please provide a link to your portfolio (e.g. link to Github) Do you require a work visa? * Select... GDPR notification * Select... When you apply to a job on this site, the personal data contained in your application will be collected by Nansen Pte. Ltd. (“Controller”), which is located at Somerset Rd, #03-09, Singapore 238164 and can be contacted by emailing . Controller’s data protection officer is Isaac Zu, who can be contacted at . Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment. Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses. You can obtain a copy of the standard contractual clauses by contacting us at . Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have to right to data portability. In addition, you may lodge a complaint with an EU supervisory authority. Submit application Powered by Greenhouse