About the Role
StarkWare builds critical cryptography-based infrastructure used by large-scale, high-value systems. Operating in a cloud-first environment, the company is a frequent target for highly capable and well-resourced adversaries, including nation-state actors and advanced criminal groups.
The security team regularly handles real-world attacks, including n-day exploitation, sophisticated phishing campaigns, and advanced intrusion attempts. Our focus is on practical, high-signal security engineering that protects the organization while supporting rapid development and research.
We are looking for a mid-senior Security Engineer to help strengthen StarkWare’s security posture across cloud infrastructure and endpoints, with a strong emphasis on detection engineering, threat hunting, and incident response. This is a hands-on technical role within a collaborative team of mixed experience levels, working closely with DevOps, Infrastructure, IT, and Engineering teams. Some aspects of the role involve collaboration with blockchain security research teams, while the primary focus remains on cloud, endpoint, and enterprise security challenges.
What You’ll Do
- Design, implement, and improve security controls and detections in a cloud-first environment.
- Perform threat hunting and investigations using telemetry from cloud services, endpoints, and internal systems.
- Respond to security incidents, including complex and low-signal cases involving novel attacker techniques.
- Use Python or JavaScript/Node.js to:
- Research attacker behavior and develop advanced detections
- Automate investigations and response workflows
- Configure, extend, and integrate security tools and data sources
- Work closely with DevOps, Infrastructure, IT, and Engineering teams to embed security into systems and workflows.
- Help evolve incident response playbooks, detection strategies, and security processes based on emerging threats and post-incident learnings.
- Participate in a security on-call rotation.
Why Join StarkWare
- Work on real security problems against advanced and persistent adversaries.
- Meaningful ownership and impact within a growing security team.
- Direct collaboration with infrastructure, engineering, and research teams.
- Opportunity to influence how security is designed and operated as the company scales