Staff Platform Security Engineer (Security)
Phantom is hiring a platform security engineer to own and improve security across its AWS and Kubernetes (EKS) environments — securing identities, workloads, CI/CD pipelines, and supply chains behind its self-custodial crypto wallet. Fully remote role, open only to candidates based in the US or Canada.
- Compensation
- $200K–$250K / yr
- Location
- Remote
- Work setup
- Remote
- Seniority
- Staff
- Employment
- Full time
- Experience
- 7+ years
- Category
- Security
- Posted
Skills
Must have
- 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related role
- Deep hands-on experience securing production AWS environments (IAM, resource policies, workload identity, network security, secrets, logging, org-level controls)
- Deep experience securing Kubernetes in production, preferably Amazon EKS (RBAC, workload identity, admission policy, network policy, pod security, secrets, hardening)
- Experience designing or securing mission-critical systems with significant customer or business impact
- Strong understanding of identity, authorization, least privilege, isolation, and blast-radius reduction across human and machine access
- Experience securing CI/CD and software supply chains (GitHub Actions or similar, build runners, workload federation, artifacts, production deployment paths)
- Experience writing and reviewing infrastructure as code using Pulumi, Terraform, CloudFormation, or similar
- Ability to write production-quality code or automation in TypeScript, Python, Go, or Rust
- High agency and ownership: taking ambiguous problems from investigation through verified remediation
- Clear communication and strong track record partnering with infrastructure and engineering teams
Nice to have
- Experience with AWS Nitro Enclaves or other trusted execution environments
- Experience securing financial, payments, wallet, custody, or other high-value transaction systems
- Familiarity with key-management infrastructure (AWS KMS, CloudHSM), cryptographic signing, or secrets-management platforms
- Experience operating or securing multi-region Kubernetes and AWS environments at scale
- Familiarity with service meshes and cloud-native networking (Istio, PrivateLink, Transit Gateway, eBPF)
- Experience with GitHub OIDC, Argo CD, Helm, Crossplane, or Kubernetes-based infrastructure delivery
- Experience with cloud-security and observability platforms (Wiz, Datadog, GuardDuty, Security Hub, CloudTrail)
- Experience building policy-as-code, automated remediation, or security tooling for a large engineering organization
- Familiarity with blockchain infrastructure or self-custodial wallet architecture
Full description
Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide.
Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Check out our Forbes Fintech 50 and CNBC and Statista's World's Top Fintech Companies 2026!
We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm.
Platform security is foundational to protecting Phantom and the systems our users rely on. We’re hiring a Senior Platform Security Engineer to own and improve security across our AWS and Kubernetes environments. You’ll work directly with infrastructure and engineering teams to secure the control planes, identities, workloads, and deployment systems behind our most critical products.
We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work. We’re looking for a strong security engineer with high agency who can identify the risks that matter, build practical controls, and own problems through verified remediation. This is a hands-on role for someone who is comfortable working in production systems, writing code and infrastructure, responding to incidents, and making security improvements without slowing down the teams building on the platform.
This role is fully remote; however, we’re only open to candidates based in the US and Canada.
Responsibilities
- AWS Security: Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails.
- Kubernetes Security: Secure production Kubernetes environments running on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation.
- Identity and Access: Design least-privilege access models for engineers, services, and automation. Build scoped, auditable, and time-bound access paths for sensitive production systems.
- Mission-Critical Systems: Protect the infrastructure supporting products and services that handle sensitive data and high-value operations.