Note: The job is a remote job and is open to candidates in USA. Rise is a global payments and payroll platform built for modern teams, enabling them to pay employees and freelancers worldwide in various currencies. The Lead Security and Infrastructure Engineer will oversee security and infrastructure operations, ensuring the platform's reliability and security across cloud and on-chain surfaces.
Responsibilities
- Own Rise's security posture across cloud, application, and on-chain surfaces
- Lead incident response: detection, containment, forensics, remediation, and blameless post-mortems - and build the tooling and runbooks so we respond faster next time
- Establish and enforce secure defaults: secrets management, least-privilege IAM, network segmentation, and audit logging
- Own secrets management and access governance, applying least privilege and separation of duties across production systems
- Run threat modeling, vulnerability management, and periodic security reviews across services and smart-contract integrations
- Build detection and alerting for anomalous traffic, abuse, and scanning against our public endpoints (Cloud Run / load balancer / Cloudflare)
- Drive compliance and audit-readiness efforts (e.g., SOC 2) and represent security to partners and customers
- Own the infrastructure operations behind code releases: run and improve the deployment pipelines that ship our fleet of Cloud Run services to production, and be accountable for safe, repeatable releases (rollouts, rollbacks, and release hygiene)
- Provide day-to-day operational support for our production infrastructure - keeping services healthy and available, responding to operational issues, and doing the maintenance, upgrades, and toil-reduction that keep the platform running
- Build and maintain CI/CD, infrastructure-as-code, and deployment pipelines on GCP
- Harden Cloud Run services, BigQuery, MySQL, and Cloudflare configuration (WAF, DNS, rate limiting, Pages)
- Improve observability - logging, metrics, tracing, and alerting - so we find problems before customers do
- Be accountable for reliability - capacity, backups, and on-call - for systems that move money, on an architecture designed to keep operational load and toil low
- Operate and continuously improve our disaster recovery capability. Own our RTO/RPO targets, manage database backup and point-in-time recovery for our managed MySQL databases, maintain and refine failover procedures and DR runbooks, and run regular restore drills and game days so recovery stays proven, not assumed
- Secure our Ethereum integrations: wallet and key management, transaction signing, and smart-contract interaction
- Review on-chain settlement flows for security and correctness, and partner with product engineering on new payment features
- Monitor on-chain operations and build safeguards against the failure modes specific to crypto payments
Skills
- Authorized to work in the United States and U.S.-based
- 8+ years in DevOps / infrastructure / SRE, with significant security engineering ownership - enough to set direction and be the founding security & infrastructure hire
- Deep, hands-on Google Cloud Platform experience (Cloud Run, IAM, networking, BigQuery, logging/monitoring, SecOps, SCC)
- Strong security fundamentals: IAM and least privilege, secrets/key management, network security, incident response, and vulnerability management
- Production experience with Ethereum / EVM - wallets, key management, transaction signing, and smart-contract interaction
- Comfort in a Node.js / TypeScript and MySQL environment
- Hands-on Cloudflare experience (WAF, DNS, edge security, Pages)
- Infrastructure-as-code and CI/CD fluency
- Proven incident-response track record - you've been in the room when something was on fire and helped put it out
- Experience in fintech, payments, or another regulated, funds-handling environment
- Security certifications (e.g., CISSP, OSCP, GCP Professional Cloud Security Engineer)
- SOC 2 / ISO 27001 / PCI experience
- Smart-contract security auditing experience
- Familiarity with stablecoins and on-chain settlement at scale
Benefits
- Meaningful equity in a growing company.
- Unlimited PTO and a flexible work schedule - we care about outcomes, not hours.
- 401(k) with a 3% company grant.
- Fully remote within the United States.
Company Overview