Senior Security Engineer
Project Eleven · Remote · United Kingdom ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior Security Engineer
- Fully remote (Europe)
- AWS + Cryptography
- HSMs & TEEs focus
- Post-quantum mission
Join Project Eleven as a Senior Security Engineer to own the security posture of an institutional product focused on quantum-safe digital asset migration. You will work directly in the codebase and infrastructure, designing secure architectures and implementing robust key management solutions.
This position requires deep technical involvement in application security, cloud hardening, and supply chain integrity. You will collaborate closely with engineering teams to embed security into the development lifecycle without compromising user experience or developer workflows.
What you'll do
- Lead threat modeling and shape secure architecture for new and existing systems
- Build AppSec programs including secure code review and CI security testing
- Harden AWS infrastructure, managing IAM, network segmentation, and secrets
- Design and operate key management architecture using HSMs and TEEs
- Implement reproducible builds and secure the software supply chain
- Review designs, code, and cryptographic protocols alongside engineering teams
- Establish incident response capabilities including runbooks and on-call rotations
- Support SOC 2 compliance by owning technical controls and evidence
What you'll need
- 5+ years in security engineering with ownership of production systems
- Strong software engineering skills to read, write, and review code
- Deep applied cryptography knowledge including key management and signing
- Hands-on experience hardening AWS cloud infrastructure and deployment platforms
- Proven ability to perform threat modeling and make pragmatic risk tradeoffs
- Experience reviewing secure architecture for distributed backend systems
- Strong English communication skills for explaining security to diverse audiences
Nice to have
- Production experience with HSMs, TEEs, or MPC/threshold signing
- Background in reproducible builds or supply chain security tools like SLSA
- Experience in institutional digital asset infrastructure or custody platforms
- Familiarity with post-quantum cryptography migration implications
- Prior experience as the first security engineer at a startup
- Offensive security background such as red teaming or pentesting
- Open-source contributions to security tooling or cryptography
Stack
- AWS
- HSMs
- TEEs
- CI/CD pipelines
- Cryptographic primitives
How you'll work
- Full-time employment
- Fully remote position
- Based in Europe (GMT to GMT+2 time zones)