Senior Security Engineer, Corporate Security

About Us

Turnkey builds secure, developer-first infrastructure for private key management, making it simple to create wallets, sign transactions, and automate on-chain actions through one elegant API – without ever exposing sensitive key material.

Our mission is to secure the open internet by making strong cryptography and key management the default. Turnkey was founded by the team behind Coinbase Custody – the world’s largest and most secure crypto custodian – whose work has helped protect over $100B in crypto across the industry.

Turnkey's team is low-ego, high-agency, and high-autonomy with more than 100 years of combined experience in cryptography, security, and low-level systems, building reliable infrastructure used at scale.

##

Role Overview

We are hiring a Senior Corporate Security Engineer to own and scale the security of Turnkey's corporate infrastructure. This is a foundational role - you'll be the first dedicated corporate security hire, working diectly with the security lead to build enterprise security capabilities from the ground up.

In this role, you’ll protect Turnkey’s people, endpoints, SaaS, identity systems, and internal
infrastructure, securing our distributed workforce while enabling the team to move quickly without compromising safety. Sitting at the intersection of security engineering, IT operations, and risk management, you’ll design and build security controls that are both robust and user-friendly, ensuring the company remains secure as it scales

##

What You’ll Do

• Build & Secure Corporate Infrastructure

• Design, implement, and manage security for endpoints and distributed systems; deploy and operate our security stack (MDM, EDR/XDR, ZTNA, SSO); enforce zero-trust principles, least-privilege access, and hardening standards

• Drive Security Initiatives & Risk Reduction

• Lead initiatives around endpoint hardening, access controls, and vendor risk; conduct security design reviews, risk assessments, and vulnerability remediation; develop and enforce security policies and best practices.

• Detection, Response & Automation

• Respond to security incidents with urgency and technical depth; collaborate on detection rules, alerts, and monitoring; automate workflows and create runbooks and playbooks to scale security operations efficiently.

• Foster Security Culture & Education

• Evangelize security best practices, build awareness programs, and partner with teams to embed “secure by default” principles into workflows; serve as a trusted security advisor across the organization.