Security Engineer

Overview

CoinTracker makes cryptocurrency portfolio tracking and tax compliance simple. CoinTracker enables consumers and businesses to seamlessly track their cryptocurrency portfolio, investment performance, taxes, and more. We are a globally distributed team on a mission to enable everyone in the world to use crypto with peace of mind. Learn more about our mission, culture, and hiring process.

Some things we’re proud of

• 🛠️ Building foundational tools in the cryptocurrency space
• 📄 Over 1M tax forms generated
• 💲 $80B+ in cryptocurrency is tracked on CoinTracker (~over 5% of the entire crypto market)
• 🤝 Partnered with Coinbase, H&R Block, Intuit TurboTax, MetaMask, OpenSea, Phantom, Solana, and Uniswap
• 🗺️ Founders: Jon previously built TextNow (200M downloads), Chandan was previously a product manager at Google & Google[x]
• 💼 $100M+ venture capital raised from Accel, General Catalyst, Y Combinator, Initialized Capital, Coinbase Ventures, Kraken Ventures, Intuit Ventures, 776 Ventures, Balaji Srinivasan, Claire Hughes Johnson, Gokul Rajaram, Serena Williams, Zach Perret
• 🌴 Awesome benefits

Your mission

Establish and scale CoinTracker’s security foundation to meet the needs of our growing B2C, B2B, and B2G businesses.

Your one year outcomes

• Define and implement the security roadmap: Identify short-term wins and establish the long-term foundation to scale CoinTracker’s security posture
• Establish core security foundations: Conduct a security gap assessment, implement baseline policies and controls, and lead third-party audits (e.g. SOC 2, pen test) to validate and strengthen our posture
• Embed security into engineering workflows: Introduce secure development practices (e.g. threat modeling, code scanning, secrets management), and partner with teams to proactively identify and mitigate risks in our systems and architecture
• Drive security operations: Define and operationalize security incident response processes, improve monitoring and detection capabilities, establish ongoing vulnerability management, and lead security postmortems to drive continuous improvements

What you will do

• As CoinTracker’s first Security Engineer, you’ll be hands-on in building the infrastructure, processes, and culture needed to protect our systems, data, and users.
• Define and execute the security roadmap, balancing near-term wins with long-term investments across infrastructure, cloud, application security, and security operations
• Conduct a security gap assessments and implement baseline controls, policies, and best practices
• Lead key security initiatives including third-party audits (e.g. SOC 2, penetration testing), security certifications (ISO 27001), incident response readiness, and vulnerability management
• Partner closely with engineering teams to embed security into SDLC — from threat modeling to code scanning to secrets management
• Foster a strong security culture across the company by driving awareness, education, and best practices

What we look for

• Role-agnostic

• Impact: Demonstrated ability to drive business impact

• Mission alignment: Hungry and motivated about making progress towards our mission of Enabling everyone in the world to use crypto with peace of mind.

• Trust: Say what you believe. Do what you say.

• Communication: Able to clearly talk about the details and also zoom out to the bigger picture

• Role-specific

• 8+ years of experience in security engineering or related technical roles, ideally in fast-paced startup or growth-stage environments

• Deep understanding of core security domains including application security, infrastructure and cloud security, identity and access management, security operations and incident response

• Hands-on experience implementing security measures and working directly with engineering and infrastructure teams

• Experience with security frameworks like SOC 2, ISO 27001, NIST, and GDPR

• Experience leading or supporting third-party audits, penetration testing, and internal risk assessments

• Resourceful, pragmatic, and comfortable working in ambiguity — able to move fast while building for the long term

• U.S. citizen and U.S. resident

• (Bonus) Familiarity with the unique risks and threat models in crypto or financial services

• (Bonus) Security certifications such as CISSP and GIAC

The starting salary for this position is between $175,000 - $240,000 USD. Candidate's location does not impact the posted salary range. The actual compensation offered will be based on a variety of job-related factors including relevant skills, education, and experience. This position also includes equity in CoinTracker and benefits like medical, dental, vision, 401(k), life insurance, and PTO.