HHiring Reality
← Blockchain.com

Senior Product Security Engineer

Blockchain.com
Location
Paris
Posted
1 month ago
Department
Engineering - Security
What they actually want (must-haves)
  • 4+ years total security engineering experience with at least 3+ years focused specially in application/product security or equivalent.
  • Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing)
  • Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar.
  • Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python, and familiarity with containerised deployments (Kubernetes).
  • Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).
  • Experience building CI checks, test harnesses and lightweight fuzzing/property tests.
Nice to have
  • Prior fintech/Trading/OTC product security experience or familiarity with custody/signing patterns.
  • Practical experience designing or deploying AI-assisted security tooling, leveraging LLMs for automated software patch generation, or evaluating vulnerability detection agents within enterprise developer pipelines.
  • Prior experience operating alongside GRC frameworks, authoring developer-facing security policies from scratch, and building automated policy-as-code gateway integrations.
  • Public track record of CVEs, security research, or open-source contributions to security tooling.
  • Advanced credentials such as OSCP, OSWE, CISSP or equivalent.
What the job really is

In this role, you will lead the Product Security program for Blockchain.com’s products, focusing on integrating security into the development lifecycle. Your responsibilities include threat modeling, overseeing security automation, conducting code reviews, and mentoring junior engineers. You will also manage the Bug Bounty program and negotiate security remediation with engineering teams while ensuring compliance with security standards.

Benefits
  • Unlimited vacation policy; work hard and take time when you need it.
  • Unlimited books policy; order the technical resources you need or simply pick something up from our company library.
  • Apple equipment.
  • Full-time salary based on experience and meaningful equity in an industry-leading company.
  • Role based in our Paris office, with a mandatory in-office presence four days per week.
  • Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.
Things to weigh
  • Role involves significant hands-on responsibilities, which may not suit those looking for a purely strategic position.
  • In-office presence required four days a week, which may limit flexibility for some candidates.
  • No specific salary range mentioned, which could be a consideration for candidates evaluating compensation.
  • The role includes mentoring responsibilities, which may require additional soft skills beyond technical expertise.
Job score3.4/5
Benefits3/5
Freshness4/5
Career value5/5
Role clarity5/5
Pay transparency0/5

Applying to Blockchain.com?

See how your résumé matches this role — and tailor it from what actually gets interviews.