Senior Security Engineer
Project Eleven· Engineering
RemoteFull-timePosted 5mo ago
About the role
Senior Security Engineer to own security engineering for institutional product and platform, focusing on threat modelling, secure architecture, AWS hardening, key management (HSMs/TEEs), supply chain security, incident response, and compliance support in a fully remote Europe-based role.
Responsibilities
- Threat modelling & secure architecture: lead threat modelling for new and existing systems, and shape the architecture of our institutional product so security is designed in, not bolted on
- Application security: build out our AppSec program: secure code review, secure SDLC, dependency and vulnerability scanning, security testing in CI
- Infrastructure hardening & AWS security: harden our cloud infrastructure and deployment pipeline; own AWS security posture (IAM, network segmentation, secrets, logging/detection)
- Key management, HSMs & TEEs: design, develop, and operate our key management architecture, including HSM-backed signing and TEE-based isolation for sensitive operations
- Reproducible builds & supply chain security: implement reproducible/verifiable builds and harden our software supply chain (dependency provenance, build integrity, artifact signing)
- Security reviews: review designs, code, and cryptographic protocols/integrations across backend systems, partnering closely with engineering
- Incident response: build and run our incident response capability: runbooks, on-call rotation, postmortem culture
- Compliance support: collaborate with compliance program team (SOC 2 Type II as first milestone), owning technical controls and evidence
Qualifications
- 5+ years in security engineering with hands-on ownership of building and securing production systems
- Strong software engineering ability to read, write, and review production code and infrastructure-as-code
- Strong applied cryptography knowledge: key management, signing protocols, secure key handling at rest and in use
- Hands-on experience hardening cloud infrastructure (AWS) and modern deployment platforms
- Real threat modelling experience with pragmatic risk tradeoffs in a fast-moving startup environment
- Experience with secure architecture and design review for distributed or backend systems
- Strong English communication, including ability to explain security engineering clearly to engineers, customers, and auditors
Skills
Required:Threat modellingSecure architectureAppSec / secure SDLCAWS securityKey management / HSMs / TEEs
Benefits
- Not specified in the description
Last updated Oct 19, 2026. Interested? Apply on the company site.
About Project Eleven
Securing digital assets for the post-quantum era
Project Eleven builds resilient infrastructure and tooling, securing digital assets for the post-quantum era.
infrastructuretoolingdigital assetspost-quantum era
More open roles at Project Eleven
- Social Media Lead6d agoRemote · GTM
- Senior Backend Engineer5mo agoRemote · Engineering