Engineering Manager, Product Security

Paxos • Full-time • Remote (Remote - United States; Remote - Canada) • $240.22k - $275.54k / year • 3m ago

About Paxos

Today’s financial infrastructure is archaic, expensive, inefficient and risky — supporting a system that leaves out more people than it lets in. So we’re rebuilding it.

We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world’s leading financial institutions, like Mastercard, Visa, Robinhood, and PayPal.

About the team

The Product Security team is responsible for keeping Paxos’ cloud-native platform secure, resilient, and compliant as we scale. We partner closely across all engineering teams to design, build, and operate secure-by-default applications in Kubernetes that power mission-critical payments, stablecoin, and brokerage products. The team owns core security capabilities of our platform like identity and access management in AWS, network segmentation, secrets management, inner-service communication, vulnerability management, and code scanning (SAST and DAST).

About the role

As the Engineering Manager, Product Security at Paxos, you will lead a team of security engineers responsible for securing our AWS and Kubernetes infrastructure end-to-end and ensuring applications are built and maintained safely. You’ll combine deep hands-on security engineering experience with strong people leadership to design secure cloud and application defaults, harden critical services, and build automated guardrails that enable product teams to move fast safely. You will drive the technical direction for cloud and application security,lead high-pressure incident response when needed, and grow a high-performing team that treats “security as an enabler,” not a bottleneck.

What you’ll do

Lead, coach, and develop a team of cloud and application security engineers, including setting clear goals, providing ongoing feedback, and running performance reviews.
Own the security posture of our cloud environment, including AWS account topology, access management, inner-service communication, network segmentation, and ongoing monitoring (e.g., Cloud Posture tools)
Partner across the engineering and security organization to embed security into application designs, CI/CD pipelines, and influence roadmaps of other teams.
Establish and scale automated guardrails for infrastructure as code/policy as code, SAST, and DAST to reduce manual toil.
Act as Incident Commander for high-severity security incidents and vulnerabilities, coordinating technical response, stakeholder communication, and post-incident reviews.
Collaborate with Compliance, Risk, and Legal to maintain and improve our security posture relative to frameworks like NIST, and to support customer and regulator inquiries.
Partner with leadership on headcount planning, hiring, and organizational design to ensure the Platform Security team scales with the business.
Champion a culture of security across Paxos through education, documentation, and close collaboration, helping teams ship secure systems quickly and confidently.

About you

8+ years of engineering experience (software, infrastructure, or security), including time as an individual contributor security engineer working on cloud or application security.
At least 2–3 years of experience as an engineering manager, leading and developing security teams.
Proven experience leading security of production AWS environments at scale, including AWS Organizations, IAM, SCPs, Transit Gateways, WAFs, and logging/monitoring.
Hands-on experience deploying secure applications to multi-cluster Kubernetes environments (e.g., network policies, admission controllers, service mesh, secrets management, runtime hardening).
Strong fluency of SSDLC lifecycle, from design to threat modeling to deployment with a bias on possible automation at every step of the way (Terraform/CDK, Policy-as-Code, SAST, DAST, AI-based penetration testing, etc).
Deep understanding of security architecture concepts, including Zero Trust, mTLS, access management, least privilege, OWASP and application and cloud hardening best practices.
Demonstrated experience leading incident response as an Incident Commander for major vulnerabilities or breaches, including coordinating cross-functional teams under pressure.
Proficiency in headcount planning, performance reviews, and mentorship, with a clear and thoughtful leadership philosophy you can articulate with examples.

Disclaimer: The first week of employment will be conducted in person at our New York City headquarters. By applying to this role, you acknowledge and agree that you will be able to travel to and work from our New York City office for onboarding during this period.

Important Notice for Paxos Applicants

We’ve become aware of fraudulent accounts posting as Paxos recruiters on LinkedIn and other platforms. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information.

To verify a legitimate Paxos recruiter:

We only use @paxos.com email addresses
We never ask for payment or financial details to apply, interview, or work here
For technical roles, we do not perform a coding interview without prior screening by our engineering team

Thanks for your interest in Paxos!

Compensation Range: $241,000 - $275,925

Related Jobs

Engineering Manager, Infrastructure

Chainlink Labs • Full-time • Remote (United States / Remote; Argentina / Remote; Brazil / Remote; Canada / Remote; Colombia / Remote; Mex) • 1m ago

Engineering And Tech Kubernetes Google Cloud Swift go Azure

1m ago

Apply

Application Security Engineer

Paxos • Full-time • Remote (Remote - United States; Remote - Canada) • $169.15k - $195k / year • 4m ago

Engineering And Tech AWS Java API Ruby Google Cloud go

4m ago

Apply

Staff Security Engineer

Paxos • Full-time • Remote (Remote - United States; Remote - Canada) • $184.78k - $217.39k / year • 4m ago

Engineering And Tech Kubernetes microservices

4m ago

Apply

Senior Staff DevOps Engineer - MetaMask

Consensys • Full-time • Remote (UNITED STATES - Remote, CANADA - Remote, LATAM - Remote) • 4m ago

Engineering And Tech Python AWS Kubernetes JavaScript TypeScript NFT iOS go Azure SRE Prometheus Helm Infura

4m ago

Apply

Senior Data Engineer

Consensys • Full-time • Remote (UNITED STATES - Remote, CANADA - Remote, LATAM - Remote, EMEA - Remote) • $156k - $187k / year • 7m ago

Engineering And Tech Python Spark Airflow AWS SQL NFT Terraform Infura DBT

7m ago

Apply

Design Director - MetaMask (Transactions)

Consensys • Full-time • Remote (CANADA - Remote, EMEA - Remote, LATAM - Remote, UNITED STATES - Remote) • $172k - $257k / year • 3w ago

Engineering And Tech NFT Infura

3w ago

Apply

Senior Software Engineer - MetaMask Card

Consensys • Full-time • Remote (CANADA - Remote, EMEA - Remote, LATAM - Remote, UNITED STATES - Remote) • $130k - $187k / year • 2m ago

Engineering And Tech JavaScript TypeScript React NFT API React Native Infura

2m ago

Apply

Staff Software Engineer, Asset Movement

Paxos • Full-time • Remote (Remote - United States; Remote - Canada) • $194.60k - $228.94k / year • 4m ago

Engineering And Tech API microservices

4m ago

Apply

Product Manager, Banking and Capital Markets

Chainlink Labs • Full-time • Remote (United States / Remote; Argentina / Remote; Belgium / Remote; Brazil / Remote; Canada / Remote; Colo) • 8m ago

Engineering And Tech NFT Smart Contracts Swift

8m ago

Apply

Senior Manager - Talent Operations

Chainlink Labs • Full-time • Remote (United States / Remote; Canada / Remote) • 10h ago

HR & Recruiting Swift

10h ago

Apply