Security Engineer

• Location: Germany. This is a remote role but candidates should be based in Germany and have a residence visa for Europe.


• Language: English is the primary working language at Civic.


• Reporting: The Security Engineer will report to the VP of Engineering.

Position overview

We are looking for a Security Engineer with experience working in fast-paced, Agile, distributed teams.

You will be responsible for achieving security by design throughout all stages of product development. You will work collaboratively with team members in Engineering, Product, Operations, among others.

We require an Engineer who is proactive, flexible, disciplined and communicative. Civic in an environment with an extremely flat hierarchy, where initiative is greatly appreciated, expected and rewarded. You will be influencing the product and architecture of our system in substantial ways.

Responsibilities:

• Lead and own improvements to system security across the stack


• Participate in the change management process


• Identify and address security issues throughout our infrastructure and services


• Spearhead architecture reviews of developed software applications and technical systems


• Support configuration, installation, and management of security tools in cloud environments


• Scale new detection controls in tandem with Civic’s growing footprint


• Optimize Civic’s incident response program and daily security tasks


• Design and monitor dashboards/reports on the success and failure of protective controls


• Create and maintain documentation as it relates to security designs/configurations, processes, and requirements

Requirements:

• 3+ years in a security-focused engineering role in a production environment


• 1+ years in application security for web and mobile based applications


• Strong familiarity with the most recent OWASP Secure Coding Practices


• Experience with run-time analysis techniques and penetration testing


• Experience with static analysis techniques and secure code reviews


• Experience with offensive security, vulnerability discovery, & modern vulnerability classes


• A deep understanding of security, from the application layer to the cloud


• Familiarity with the most common Blockchain security exploits.


• Familiarity with Cloud services, AWS in particular, the security features they provide, and the security risks they present.


• Comfort and skill in a remote-working environment

Our Tech Stack:

• Javascript (ES6+), Typescript


• Kotlin, Swift


• React Native, Redux, Rx


• Node.js


• Serverless: AWS Lambda, API Gateway, Kinesis, DynamoDB etc.


• Blockchain: Ethereum (Solidity), Solana (Rust)


• Docker & Kubernetes

About Civic Technologies

Civic is the leader in decentralized identity for web3. The company’s flagship product, Civic Pass, is an integrated permissioning tool that helps business customers enable secure access to their on-chain assets. Users may also manage their Web3 identity, presence and reputation. If you’re ready to make waves at the epicenter of the most exciting industry in tech, we might be a fit.

We are a team of passionate, technical and collaborative individuals who believe that identity is the key to unlocking the future of blockchain’s mainstream adoption. We work hard, celebrate success and strive to support one another to overcome challenges. We are low on ego, and high on teamwork. Civic is one of the original blockchain companies in the identity space, and is just hitting its stride.

A few benefits of working at Civic:

• Competitive salary and stock options


• Work from wherever you like


• Computer equipment and workspace touches to suit your needs


• Flexible time off as agreed with your manager and your team – we don’t count hours in the seat, we focus on productivity and deliverables


• Parental leave


• Unlimited company-paid budget for technical/training books


• Ongoing annual budget for company-paid education programs including classes, conferences, professional associations, certifications, etc.


• Annual team get together somewhere on the globe – we love to see each other in person too!


• Great colleagues and inspiring startup environment

There is no one “Civic” kind of employee – we like it that way! Civic celebrates diversity and is committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.