Senior Security Engineer, Product & Infrastructure
at Squads
Remote | North America or Europe, remote, senior, full time, USD 1,75,000–2,20,000 / year, 8+ years
posted 06 Oct 2026
- MPC
- Rust
- HSM
- Threat Modeling
- Go
- Secure Code Review
- SAST
- Container Security
- PKI
- SOC 2
- TypeScript
- Anchor
- IAM
- Solana
- Secrets Management
- Cryptography
- AWS
- Python
About the role
Remote: yes Posted: 2026-10-06
ABOUT SQUADS
Squads is a financial technology company building products and APIs for the stablecoin economy. We build on open infrastructure, global money, and internet capital markets to deliver better financial services to businesses, individuals, and developers.
Our products span the company’s mission: Squads Multisig helps teams secure and manage assets on Solana; Altitude gives businesses a global account to run their financial operations; and Fuse brings stablecoins and tokenized assets to personal finance.
More than 450 teams use Squads Multisig to secure over $10 billion in value. Our investors include Haun Ventures, Multicoin Capital, Electric Capital, Coinbase Ventures, Toly, Mert, and others.
THE ROLE
You’ll own product and infrastructure security across Squads, working closely with our Head of Security, CTO, and engineering leads across Multisig, Altitude, Fuse, and the infrastructure that powers them. That means being in the room when systems are designed, reviewing code before it ships, and driving every finding to verified closure.
This is a hands-on role. You’ll read code, write threat models, and build the tooling and standards that make the secure path the default as engineering grows. We’re looking for a senior practitioner who can tell engineers what to fix and why, and hold the line on what matters without slowing the team down.
WHAT YOU’LL OWN
DESIGN & CODE REVIEW
- Join product and engineering calls as the security reviewer, raising concerns while designs are still cheap to change
- Lead threat modeling and security design reviews for new products, features, and infrastructure changes
- Perform hands-on secure code review across backend services, APIs, frontends, and Solana programs, with a focus on authentication, authorization, and access control
VULNERABILITY MANAGEMENT
- Own the full lifecycle for findings from audits, pentests, code scanning, and bug bounty: triage, prioritization, remediation tracking, and fix verification
- Set severity and SLA standards, and hold the team to them
- Run bug bounty intake, validate external reports against source, coordinate with audit partners, and scope internal assessments
Read from jobs.ashbyhq.com, last seen 4d ago.