Position: Cloud Security Engineer, Senior (Decentralised Identity Application)
Company: Affinidi
Category: Security
Experience required: 5y
English level: upper

Join Affinidi and be part of the future of identity: secure, portable and controlled by the individual.

Affinidi empowers individuals and organisations with ownership and control of their verifiable data, to unlock value across borders and platforms.

Leveraging on the building blocks that Affinidi provides, trusted institutions and entities can issue verifiable credentials to customers, which can in turn be shared with other applications to access services in an open and interoperable ecosystem.

Currently undergoing development are three applications that leverage Affinidi’s technology: Safe Travel initiative, a digital medical credentials ecosystem to safely open up international air travel; Trustana, a curated B2B marketplace and trade platform connecting verifiable, international partners for seamless cross-border trade; and Good Worker, an online job matching platform for seasonal workers and employers in India.

Affinidi, along with the applications Trustana and Good Worker, are seeded by Temasek, a global investment company headquartered in Singapore.

We are building a motivated and entrepreneurial team who is passionate about identity, decentralization and technology to make this happen.

Join Affinidi and be part of the future of identity: secure, portable and controlled by the individual.

Affinidi empowers individuals and organisations with ownership and control of their verifiable data, to unlock value across borders and platforms.

Leveraging on the building blocks that Affinidi provides, trusted institutions and entities can issue verifiable credentials to customers, which can in turn be shared with other applications to access services in an open and interoperable ecosystem.

Currently undergoing development are three applications that leverage Affinidi’s technology: Safe Travel initiative, a digital medical credentials ecosystem to safely open up international air travel; Trustana, a curated B2B marketplace and trade platform connecting verifiable, international partners for seamless cross-border trade; and Good Worker, an online job matching platform for seasonal workers and employers in India.

Affinidi, along with the applications Trustana and Good Worker, are seeded by Temasek, a global investment company headquartered in Singapore.

We are building a motivated and entrepreneurial team who is passionate about identity, decentralization and technology to make this happen.

What you’ll do
- Implement a software assurance model designed to address security defects early in the delivery pipeline.
- Perform security design reviews for new features and product releases.
- Perform code reviews and advise developers on remediation techniques.
- Facilitate internal training on various security topics to raise awareness and interest.
- You will work closely with the platform and SRE teams to apply and share your experience in AWS cloud security.
- You will conduct security penetration testing exercises for Affinidi’s infrastructure.
- You will develop and maintain Security Operations playbooks and standard operating procedures for a distributed scaled system as it evolves.

You Should Apply if
- You have experience in Security Engineering, Threat Modelling and Security Code Review
- Experience with secure coding practices and automating security checks in pipelines
- You have operational knowledge of JavaScript, Typescript, Golang, Python or other languages
- Good understanding of containerization technology such as Docker and Kubernetes, and the ability to deploy hardened configurations using orchestration tools.
- You have experience with AWS cloud technology, cloud security best practices.
- You have the ability to manually exploit security flaws on AWS, web applications and APIs.
- You enjoy interacting with people from different teams in order to get the job done
- You have interest or are already involved and contributing to the community, either with code or attending/giving talks at meetups, conferences or being a mentor.

Bonus Points if
- A link to a Github repo with security tools/scripts you’ve developed or help maintain
- Web development experience, bug bounty program participation or open source vulnerability research

Perks
- Remote-first company
- Unlimited vacations and sick-leaves 😍
- Extended Medical Insurance
- Learning budget — $1000 per year
- Home Battle-station allowance — $300
- Co-working space of your choice — if you are bored to work from home or haven’t bought your ticket to Bali yet 😊
- Face-to-Face teambuildings: we expect to have at least 1 per quarter

Logistics

Here is the interview process for this role:
- 30m interview with one of our Talent Team or Recruitment Partners
- 1h interview with one of our Security Engineers
- 1.5h pairing interview with one of our Security Engineers
- 3hrs of multiple interviews with a variety of people including our CTO, Leads and other Engineers

We can be flexible with the structure if someone’s circumstances or timescales require it for good reason, just let us know!

Please reach out if you have any specific requirements so we can be as accommodating as possible for you.

Equal Opportunity Statement

Affinidi embraces diversity in all of its forms and fosters an inclusive environment for all people to do the best work of their lives with us.

We’re an equal opportunity employer. All applicants will be considered for employment without attention to ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity status or disability status.