Staff Corporate Security Engineer

Staff Corporate Security Engineer

US or Europe, remote first with offices available · Full-time · Security · Reports to CISO

About DFNS

Finance is moving onchain. Stablecoins, tokenized deposits, securities and funds are changing how money and assets are issued, held and transferred. The destination is a financial system where any asset can be issued, moved and governed onchain with the controls regulated institutions require. That shift needs a new foundation. Just as core banking systems manage accounts and ledgers today, financial institutions need a platform to manage digital assets. DFNS is that platform. Today, we secure hundreds of billions of dollars in assets every month for more than 500 clients worldwide.

Why this role

Our platform secures a lot of value and has never been breached. Companies like ours rarely fail through the product. They fail through a laptop, an identity, a SaaS integration or a leaver whose access was never removed. You will own corporate security for a company spread across Europe, America, and Asia, with controls strong enough to pass a bank’s due diligence and light enough that engineers do not route around them. In year one you will make identity, endpoints and SaaS provably controlled, build detection for the corporate estate and carry the corporate control set through our SOC 1, SOC 2, ISO 27001, and ISO 22301 audits.

What you’ll do

• Own identity and access across the company (SSO, MFA, passkeys, device trust, automated joiner, mover and leaver flows) so that who has access to what is provable at any moment.

• Harden and manage endpoints and the SaaS estate, from MDM and EDR to Google Workspace and the tools we run the company on.

• Build detection and response for corporate systems, from centralized logging and alerting to runbooks, and lead the response when something happens.

• Run asset inventory and vulnerability management for corporate infrastructure, with automation in place of spreadsheets.

• Keep the SOC 1, SOC 2, ISO 22301, and ISO 27001, 27017 and 27018 controls you own operating and audit ready, and carry them through surveillance audits.

• Design security awareness and phishing resilience that makes staff the first line of defense rather than the weakest link.

• Work with Infrastructure and Product Security so the boundary between corporate and production is explicit, enforced and tested.

What you bring

Must-haves

• Experience owning corporate security at a technology company, hands on, as the person who built and ran the controls.

• Deep identity and access expertise across SSO and identity providers, MFA and passkeys, device trust and automated access lifecycle.

• Endpoint and SaaS security in practice, including MDM, EDR and Google Workspace administration and investigation.

• Experience building detection and running incident response for corporate systems, including a SIEM or equivalent.

• Scripting and automation (Python, Bash, APIs) to automate controls and the evidence they produce.

• Experience operating controls under SOC 2 or ISO 27001 and supporting audits.

• Writing clear enough that an auditor and an engineer read the same document and both understand it.

Nice-to-haves

• Cloud security fundamentals on AWS.

• Experience in fintech or another regulated, audited environment.

• Experience running a macOS fleet at scale.

• Business continuity and disaster recovery planning.

How we work

We are a distributed company headquartered in Paris. Our teams work from Europe, the US and Asia, with offices in New York, Geneva, Dubai, Singapore, Hong Kong and São Paulo. We write decisions down so they survive time zones. We hold our own work to the standards our clients are held to. We hire people who can own an outcome end to end and we give them the room to do it.

What we offer

A competitive base salary set by role and location, a bonus or variable plan where the role carries one and stock options vesting over four years. Healthcare, flexible vacation, parental leave and a once-a-year home technology allowance, with travel expenses covered. A MacBook and the equipment you need to do your best work. Remote first, with an office if you want one.

Base salary range: $150,000-250,000

Hiring process

We aim to complete the process in 2 weeks and we tell you where you stand after every step.

• Intro call with Co-CEO (30 minutes).

• Personality and cognitive assessments, completed on your own time (45 minutes).

• Focus Interviews (about 3 hours): CISO (30 minutes), technical exercise (45 minutes), general security (45 minutes), design security (45 minutes) and culture fit (30 minutes).

• Reference calls and background checks.

Equal opportunity

DFNS is an equal opportunity employer and considers every applicant based on ability and potential, regardless of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, disability, age or any other characteristic protected by law. If you need an accommodation at any point in the process, tell us and we will arrange it.