Engineering Lead — Security

Stack

Responsibilities

• ▹Work with other technical leaders to help define the engineering culture and bar
• ▹Own the security posture of the L1 infrastructure - validators, RPC, signing services, supporting systems
• ▹Harden hosts, networks and pipelines; drive vulnerability management, patching and security monitoring
• ▹Define and roll out the policies and standards that govern the organization - access control, secrets management, secure SDLC, change management, compliance-readiness
• ▹Drive application and supply-chain security for what Somnia ships, including the permissions and provenance of agent-authored changes
• ▹Design and operate multisig governance, signing ceremonies and the key lifecycle for treasury, upgrades and privileged operations
• ▹Build and lead the security incident-response capability - detection, triage, containment, blameless postmortems - and run tabletop exercises
• ▹Stay hands-on with threat modeling, security reviews and red-team exercises; coordinate external audits and bug bounties
• ▹Work with the infrastructure and L1 teams so node and validator operations resist compromise

Requirements

• ▹Extensive security engineering experience, with deep infrastructure security and SecOps expertise at scale, plus application-security breadth to raise the bar across product teams
• ▹Hands-on experience securing and operating production systems - Linux internals, networking, containers/Kubernetes, IaC
• ▹Track record defining and implementing security policies an engineering org actually adopts
• ▹Key management at depth

Soft skills

About the company

Somnia is the Agentic Chain - a hyper-performance L1 operating an order of magnitude faster than existing networks, enabling real-time, autonomous and fully decentralized products. It is developed by the Somnia Foundation, backed by British tech unicorn Improbable.