Senior Cloud Security Engineer
MoonPay
About MoonPay 🌖💸
Hi, we’re MoonPay. We’re here to onboard the world to Web3.
Why? Because we think Web3 is a unique and democratizing technology. It gives people back control of their money, digital identity, data, and property like nothing else before it.
What we do
We’re the leading infrastructure company in Web3. This means we offer our partners everything from payment solutions (we call them 'Ramps') to minting software for digital collectibles, like NFTs. And over 20 million people around the world now trust our products — just take a look on Trustpilot.
We’re also big on collaborations. And we've worked on stunts, drops, and partnerships with some of the world's most prestigious and forward-thinking brands.
But that’s not all. We have also built our own consumer app because we wanted to see if we could build a better Web3 account. It’s taken off in a big way, and we're working hard to continually improve it and to strive for perfection.
So whatever your background, we’re sure there’s something for you here. Come help us build the future of Web3 and digital ownership.
Locations supported 🌍
Lisbon, Barcelona, Madrid, Bucharest, Krakow, Cape Town
About the Opportunity ✍️
Our engineering discipline builds the technology that enables MoonPay to learn quickly and scale easily. As MoonPay grows, so does the risk surrounding its cloud footprint. The Application Security team is responsible for building safeguards that allow our developers to move fast while minimizing risk, maintaining a secure software supply chain, and developing secure infrastructure patterns such that our applications run safely with a reduced blast radius.
What you will do…
Architect and build secure solutions for problems such as just-in-time permissions management, deploy and release pipelines, and securing the software supply chain.
Act as a subject matter expert for the SRE and engineering teams by providing guidance on secure infrastructure-as-code and architecture reviews.
Secure, harden, audit, and threat model current and new infrastructure being deployed to the cloud at MoonPay.
Participate in and support the incident detection and response process by building observability and alerting where required and assisting the incident response team.
About You 🙋
We use Google Cloud Platform (GCP) as our main platform, and you'd be leveraging your experience with GCP Security Command Center and Datadog to identify and address any security risks. Bonus points if you've also dabbled in AWS Security Hub!
You have experience working with and securing containers and related technologies such as Docker, Kubernetes, or Nomad.
You have deployed secure infrastructure-as-code using tools like Hashicorp's Terraform,Terraform CDK, or Pulumi.
You are comfortable explaining technical concepts like vulnerabilities and discussing effective mitigations.
You are self-motivated, can work effectively in a remote setting while maintaining a team-focused mindset.
Bonus Points if 🏆
Experience working in a disruptive technology, successfully launching products, ideally, within FinTech, SaaS, Crypto.
Your experience includes building and securing container images for JavaScript applications leveraging frameworks like React and Node.js (including TypeScript).
You have completed or are in the process of completing security certifications such as Certified Kubernetes Administrator, Certified Kubernetes Security Specialist, AWS Certified Solutions Architect, Google Professional Cloud Architect, GIAC GCLD, .etc.
You contribute to the security community in open source, by participating in CTFs, or giving talks at local information security conferences.
What you be working with…
Typescript as our programming language of choice
Node.js as our backend platform
Google Cloud Platform to host our services
Postgres as our core database
Redis for caching
DataDog for logging and monitoring
GitHub to manage our source code
Perks:
Equity package 📈
Unlimited holidays 🏝
Paid parental leave 👶 🍼
Annual training budget 💻
Home office setup allowance 🪑
Monthly budget to spend on our products 💰
Working in a disruptive and fast-growing industry where the possibilities are endless 🚀
Freedom, autonomy and responsibility 💪
Commitment to diversity:
At MoonPay we believe that every voice matters. We strive to create a mindful and respectful environment where everyone can bring their authentic self to work, and experience a culture that is free of harassment, racism, and discrimination. That’s why we are committed to diversity and inclusion in the workplace and are a proud equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including, but not limited to, hiring, recruiting, promotion, termination, layoff, and leave of absence.
MoonPay is also committed to providing reasonable accommodations in our job application procedures for qualified individuals with disabilities. Please inform our Talent Team if you need any assistance completing any forms or to otherwise participate in the application process.