Senior Security Engineer – Crypto FinTech

About the role

Agora is building a stablecoin platform that enables developers, fintechs and institutions to issue, manage and integrate programmable digital dollars. As a Senior Security Engineer you will partner with engineering to embed security throughout the product lifecycle, from design through production, and help operate the company’s security monitoring and incident response program.

Key responsibilities

• Partner with engineering and product teams to perform threat modeling, security reviews of designs, code, APIs, infrastructure as code and cloud environments.
• Develop, tune and maintain security tooling (SAST, DAST, SCA, CSPM, container scanning) and integrate controls into CI/CD pipelines.
• Design and implement detection rules, investigate alerts, and coordinate with the SOC during incident response.
• Own the vulnerability management process, from intake and prioritization to remediation tracking and reporting.
• Support third‑party penetration tests, code reviews and architecture assessments.

Required profile

• 5+ years of hands‑on product, application or cloud security engineering experience.
• Strong software engineering fundamentals with ability to review TypeScript/Node.js code.
• Experience securing AWS environments, Kubernetes workloads and infrastructure‑as‑code pipelines.
• Proven track record of operating security tooling such as SAST, DAST, SCA, CSPM and SIEM.
• Hands‑on experience in security incident response and vulnerability management.

Required skills

• TypeScript, Node.js, JavaScript
• AWS, Kubernetes, Docker, Pulumi, Argo CD, GitOps
• SAST, DAST, Software Composition Analysis, CSPM, container scanning
• SIEM, cloud‑native detection platforms, security monitoring
• Relational databases, REST APIs, authentication/authorization mechanisms