We don't wait for the future—we build it. We are Clavium.

Clavium is a developer-centric, tech-forward company dedicated to solving complex problems in the blockchain space. By harnessing advanced technologies, we build tools and capabilities that enable individuals to securely manage their digital assets. We foster a culture of innovation and constant challenge, empowering our team to grow, experiment, and drive impactful solutions.

We’re looking for a skilled Security Engineer to help us secure the infrastructure, applications, and services that power our everyday operations. As a key member of our security team, you’ll be instrumental in shaping our security posture, ensuring that Clavium stays ahead of emerging threats, and protecting our valuable digital assets.

Reporting directly to the Head of Information Security, you’ll work across multiple data centers and cloud environments, implementing security best practices, and automating tasks like security scanning, patching, and configuration management. You will proactively identify and address security vulnerabilities while collaborating with cross-functional teams to embed security into their workflows.

Day to day:

• Implement & Manage Security Systems: Oversee security across Clavium’s infrastructure, applications, and data to protect against security threats.

• Collaborate with Teams: Work closely with networks, applications, and engineering teams to harden technology platforms and ensure the right level of observability.

• Provide Guidance: Advise product delivery teams on security architecture, design, and development, ensuring secure deployment practices across the software lifecycle.

• Proactive Security Measures: Identify and recommend improvements to security systems, applications, and deployments.

• Enforce Security Standards: Assist in enforcing security policies, ensuring compliance with industry standards and relevant regulations.

• Incident Management: Work with internal teams and vendors to resolve security incidents quickly, and conduct post-incident root cause analysis.

• Stay Ahead of Threats: Keep up to date with the latest security trends, technologies, and vulnerabilities to continuously improve the company’s security posture.

• Security Training: Contribute to the development and delivery of security awareness and training programs for all employees.

What we’re looking for from you:

• Experience with DevSecOps: Familiarity with security principles and frameworks like OWASP, NIST, and the implementation of secure development lifecycle (SDLC) processes.

• Threat Modelling & Risk Assessment: Experience in identifying and assessing security risks, and implementing mitigation strategies.

• Secure Code Development: Knowledge of secure coding practices and how to integrate security throughout the software development lifecycle.

• Incident Response: Proven experience handling security incidents, breaches, and performing forensic investigations.

• Enterprise Security Tools: Experience with tools like IDS/IPS, SIEM, and content filtering to monitor and defend enterprise environments.

• Network & Web Protocols: In-depth understanding of networking, the OSI model, and web protocols like TCP/IP, HTTP, and DNS.

• Communication Skills: Ability to explain complex security concepts to non-technical stakeholders at all levels of the organization.

• Problem-Solving: Strong analytical skills with a methodical approach to problem-solving and decision-making in high-pressure situations.

• Team-Oriented: Collaborative mindset with the ability to work independently in a fast-paced, evolving environment.